As described in RFC 6819, users should always be in control of authorization processes and have the necessary information to make informed decisions.
If you want users to acknowledge and accept that they are giving an app access to their data, you can configure AM to display a consent page during the OAuth 2.0/OIDC authentication flow.
{% hint style="info" %} You can change the look and feel of the user consent form. See custom pages for more information. {% endhint %}
You can view a list of applications for which each user has provided consent. To revoke access to an application:
-
Log in to AM Console.
-
Click Settings > Users.
-
Select the user and in the Authorized Apps tab, revoke the application.
Revoke user's authorized applications
{% hint style="info" %} Revoking consent can also be done via the AM Management API. {% endhint %}