>Scott would have to say for sure, but I think not redirecting back to Web Flow from an >external authn Servlet when consent is revoked is a bug. I'll have to look at it, but yes, it always needs to redirect, so it's probably a regression. -- Scott