Allow Users to Review and Revoke Consent with Custom OAuth 2.0 Scopes
Jun 9, 2023
Administration
Okta Classic Engine
|
|
|
|
Best Practices
|
|
|
FAQs
| Q: How do I enable my branding on this page? A: Using our Custom URL and Custom Login page features, you can make sure your users have an experience that is consistent with your brand and exactly what they expect. |
| Q: How can my users revoke consent? A: There is not an OAuth 2.0 specific approach for this but within the Okta API, we give you the ability to revoke a single, specific scope, all scopes for an application application, or all scopes for that user. Whether you’re fine-grained or broad is entirely up to you. |
| Q: How does this change my application? A: Very minimally. When the user grants consent, the OAuth flow returns control to your application along with the access token, just as it does now. When the user denies consent, Okta does not generate the access token and returns an error with a useful message. You only have to handle the new error message. |
