How to purge/customize the /showconsent /showrevoke user consent

Last updated on NOVEMBER 06, 2017

Applies to:

Goal

1) In OAM OOTB, how users can manage their OAuth consent provided during login ? (means users should be able to view and delete all the saved consent in OAM by accessing a common consent management page in OAM)

2) What are all the options/API available in OAM to manage OAuth user consent ? (In case if customer wants to build his own consent management portal instead of using OAM OOTB consent management page)

3) Is there a way OAM system administrator can revoke user consent? if yes how? (Similar to session/token deletion can purge all users saved consent).

For example. If Organization T&C changes and if we want to enforce all users to provide new consent by reading new T&C then old consent must be purged from OAM.

4) Is there a way in OAM to revoke user consent as soon as user’s access token gets expired ? (So that consent is not saved in OAM DB and user must provide fresh consent on every login)

Solution