---
schema_version: "1"
id: 5f3723f5d162eb1ecdcb005d6dbd2f089cb29755bfe0cb337b7c56384c4289f3
title: Policy Categories
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/mule-gateway/policies-policy-categories.md
canonical_url: https://docs.mulesoft.com/mule-gateway/policies-policy-categories
source_site: docs.mulesoft.com
content_type: documentation
content_hash: cb216e0d0385024d7d1cad3200f91cf98063da0717558f57ffa44e3b2d6a0cf0
description: MuleSoft Documentation Site
latest: true
---
---
product: Mule Gateway
keywords: policy, custom, ootb, offline
---

# Policy Categories

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Policies are categorized by the function they perform. For example, because you resolve issues with
the help of logs, the Message Logging policy is categorized as a troubleshooting policy. The
following table lists included policies by its category and the function it performs:

<table><colgroup><col> <col> <col></colgroup><thead><tr><th>Category</th><th>Policy</th><th>Function</th></tr></thead><tbody><tr><td><div><div><p>Security</p></div></div></td><td><div><div><p>Basic Authentication - LDAP</p></div></div></td><td><div><div><p>Authenticates the LDAP credentials.</p></div></div></td></tr><tr><td><div><div><p>Security</p></div></div></td><td><div><div><p>Basic Authentication - Simple</p></div></div></td><td><div><div><p>Authenticates a single user password.</p></div></div></td></tr><tr><td><div><div><p>Security</p></div></div></td><td><div><div><p>IP Blocklist</p></div></div></td><td><div><div><p>Blocks a range of IP addresses.</p></div></div></td></tr><tr><td><div><div><p>Security</p></div></div></td><td><div><div><p>IP Allowlist</p></div></div></td><td><div><div><p>Allows access from only a preapproved range of IP addresses.</p></div></div></td></tr><tr><td><div><div><p>Security</p></div></div></td><td><div><div><p>JSON Threat Protection</p></div></div></td><td><div><div><p>Protects against a malicious JSON structure in API requests.</p></div></div></td></tr><tr><td><div><div><p>Security</p></div></div></td><td><div><div><p>XML Threat Protection</p></div></div></td><td><div><div><p>Protects against malicious XML elements in API requests.</p></div></div></td></tr><tr><td><div><div><p>Security</p></div></div></td><td><div><div><p>JWT</p></div></div></td><td><div><div><p>Validates a JWT token.</p></div></div></td></tr><tr><td><div><div><p>Security</p></div></div></td><td><div><div><p>OAuth 2.0 Access Token Enforcement Using Mule OAuth Provider Policy</p></div></div></td><td><div><div><p>Enforces token access using the MuleSoft OAuth Provider policy.</p></div></div></td></tr><tr><td><div><div><p>Security</p></div></div></td><td><div><div><p>OpenAM Access Token Enforcement</p></div></div></td><td><div><div><p>Restricts access to a protected resource using an Open AM authentication server.</p></div></div></td></tr><tr><td><div><div><p>Security</p></div></div></td><td><div><div><p>PingFederate Access Token Enforcement</p></div></div></td><td><div><div><p>Restricts access to a protected resource using the PingFederate authentication server.</p></div></div></td></tr><tr><td><div><div><p>Security</p></div></div></td><td><div><div><p>Tokenization</p></div></div></td><td><div><div><p>Transforms sensitive data into nonsensitive equivalent tokens.</p></div></div></td></tr><tr><td><div><div><p>Security</p></div></div></td><td><div><div><p>Detokenization</p></div></div></td><td><div><div><p>Transforms a tokenized value back to the original data.</p></div></div></td></tr><tr><td><div><div><p>Compliance</p></div></div></td><td><div><div><p>Client ID Enforcement</p></div></div></td><td><div><div><p>Allows access to client applications with a valid client credentials.</p></div></div></td></tr><tr><td><div><div><p>Compliance</p></div></div></td><td><div><div><p>CORS</p></div></div></td><td><div><div><p>Enables calls executed in a web page to interact with resources from different domains.</p></div></div></td></tr><tr><td><div><div><p>Transformation</p></div></div></td><td><div><div><p>Header Injection</p></div></div></td><td><div><div><p>Adds headers to the request or response message of a policy.</p></div></div></td></tr><tr><td><div><div><p>Transformation</p></div></div></td><td><div><div><p>Header Removal</p></div></div></td><td><div><div><p>Removes headers from the request or response message of a policy.</p></div></div></td></tr><tr><td><div><div><p>Quality of Service</p></div></div></td><td><div><div><p>HTTP Caching</p></div></div></td><td><div><div><p>Stores HTTP responses from an API implementation.</p></div></div></td></tr><tr><td><div><div><p>Quality of Service</p></div></div></td><td><div><div><p>Rate Limiting</p></div></div></td><td><div><div><p>Enables imposing a limit on the number of requests that an API can accept within a specified time.</p></div></div></td></tr><tr><td><div><div><p>Quality of Service</p></div></div></td><td><div><div><p>Rate Limiting, SLA-Based</p></div></div></td><td><div><div><p>Enables imposing an API request limit based on SLA tiers.</p></div></div></td></tr><tr><td><div><div><p>Quality of Service</p></div></div></td><td><div><div><p>Spike Control</p></div></div></td><td><div><div><p>Controls API traffic.</p></div></div></td></tr><tr><td><div><div><p>Troubleshooting</p></div></div></td><td><div><div><p>Message Logging</p></div></div></td><td><div><div><p>Logs a custom message when an API is invoked.</p></div></div></td></tr></tbody></table>

## See Also

- [Included Policies Directory](https://docs.mulesoft.com/mule-gateway/policies-included-directory)