External authorization capability
Verify Identity Access provides an optional external authorization capability to accommodate any additional authorization requirements.
In some cases, it might not be possible for the standard Verify Identity Access policy implementations to express all conditions required by a security policy. The standard policy implementation uses ACLs, POPs, and authorization rules to manage access to resources.
You can use the external authorization service to impose additional authorization controls and conditions that are dictated by a separate, external, authorization service module.