Supported Policies

Updated 29 October 2026

Policies can be configured for your APIs in Cloud API Management through:

• Call Transformation - for individual endpoint configuration.
• Policy Templates - for reusable policy templates across multiple endpoints.

Custom policy (formerly Adapters)

Chaining policies

The following chaining policies are available in both Cloud API Management (SaaS) and Boomi Cloud API Management - Local Edition (on-prem):

• OAuth2 JWT Authentication Policy (Authentication and security)
• OAuth2 Shared Token Policy (Authentication and security)
• HTTP Basic Authentication Policy (Authentication and security)
• Circuit Breaker Service Policy (Resiliency)

Pre-built policy (formerly Connectors)

The following pre-built policies are available in Cloud API Management (SaaS).

• Authentication and security:

  • JWT Authentication Policy
  • Ping Auth Policy:
    • Ping Federate OAuth2 Policy
    • Ping Federate OAuth2 LMS Policy
  • JSON Body API Key Authentication Policy
  • API Policy:
    • JWT Claims Verification Policy
    • JWT Signature Verification Policy
  • OAuth2.0 Token Authentication Policy
  • SOAP WS-Security Policy
  • OIDC Token Authentication Policy
  • OAuth2 Backend Authentication Policy
  • JSON Threat Protection Policy
  • XML Threat Protection Policy
  • Regex Threat Protection Policy

• Filtering and routing:

  • IP Blocking Policy
  • IP Allowlisting Policy
  • IP Routing Policy
  • Target Routing Policy
  • Domain Routing Policy
  • Geo Target Routing Policy
  • Block API Policy
  • Allowlisting Policy

• Caching, header manipulation, and validation:

  • SOAP Cache Policy
  • REST Cache Policy
  • API Schema and Payload Size Validation Policy
  • Inject Static Headers Policy
  • Strip Header Policy
  • Inject Conditional Header Policy
  • Inject Model Attribute Headers Policy
  • JSON Schema and Payload Size Validation Policy

• Transformation:

  • XML to JSON Transformation Policy
  • SOAP to REST Transformation Policy
  • REST to SOAP Transformation Policy

• Sidecar design:

  • AWS Lambda Sidecar Integration Policy
  • Ping Intelligence Sideband Policy