Post Authentication Plugins allow you to do some processing after the authentication has been attempted. For example, you may want to keep track of how many failed authentications a username had and display a CAPTCHA response if its over a certain amount.
You can also use this API to return authentication related messages.
The API for the Post Authentication Plugins looks like this:
...