> Did you look at the Kanata consent receipts standard? > > https://kantarainitiative.org/confluence/display/infosharing/Consent+Receipt+Specification Thanks for that link. My first thought was : "it won't fit in a cookie" (which is the IdP's default client-side storage mechanism). Maybe a minimum set of JSON fields would. Tom