manage (view, revoke) consent in IDP

[Peter Schober]

Are there any plans to provide a UI within the IDP to manage (i.e.,
display and optionally revoke) previously created and still active
consent records in whatever storage service is active? E.g.:

* mdui:DisplayName of SP1, date, other stuff   [X] <- revoke
* mdui:DisplayName of SP2, date, other stuff   [X] <- revoke
* mdui:DisplayName of SP3, date, other stuff   [X] <- revoke

With HTTP Cookies and HTML5 LocalStorage options available the IDP
really is the best (or only) one that could handle this, I think.
(Only when using a networked RDBMS for storing consent I could imagine
re-implementing the logic and semantic and slapping a web UI on that
same data from an external application, e.g. protected by a SAML SP.)

I have no idea how people accessing the IDP would be getting at that
UI were it provided by the IDP itself, except maybe with yet another
checkbox on the login page (urgh).  But anything adressable with a URL
is proably good enough, as people could provide their own links to
that resource (from within IT-support pages, company portals, etc.)

-peter