Custom policies allow you to extend or modify the authentication flows in AAD B2C beyond what is possible through configuring the built-in user flows. However, custom policies have to be designed in XML and require a higher level of comfort and understanding of OpenID Connect flows, identity providers and claims-based authentication.