storing "data transparency" in consent records

[Tom Zeller]

> if the APIs existed to access those records

Well, just noting that Java APIs exist in the IdP (actually OpenSAML)
to access consent (or any kind of) StorageRecords. I imagine a
REST-ish profile flow could be written to access them as well, but
that assumes the records are stored server-side, which is not the
IdP's default. Sometimes I think that consent records should be stored
both client-side and server-side in order to facilitate a UI/UX as
well as to follow the user across devices. But I guess one issue there
would be syncing the records.

Tom