To implement continuous authentication, mobile developers must support fine-grained enterprise security policies about the person, device state and authenticator. An embeddable Policy Decision Point (PDP) is essential for lightning fast policy evaluation, consistent decision logging, and advanced JWT validation.