Is A Custom OAM Plugin the best way to accomplish this?

Hi,

My apologies for the kind of odd subject, but I wasn't sure exactly how to ask my question...

In our OAM configuration, we have a bunch of OAM Authentication modules already.  Most of them use out-of-box OAM authentication plugins like UserIdentificationPlugin or UserAuthenticationPlugin, but some also use some custom OAM plugins that we have developed over the last several years (e.g., a custom certificate authentication OAM plugin, etc.).

Now, we are looking to add some additional processing where we "filter" some information (e.g., the information that normally would be in $user.groups) and returning the filtered information in custom response variables (e.g., a $session.attr.foo).