> And this way the concept of "consent" (or its withdrawal?) becomes > meaningless. Not if the user could bail "remove me from this SP" or "have me removed from any SP that asks later" at his IdP. And the back channel should have some mechanism to signal this to the SP (maybe also automatically when a certain identity gets inactive/deleted). Kind regards.