> did I missed something ? Looks ok to me. I suggest confirming that the consent module is loaded (using bin/module.sh or bin/status.sh or the status page). Setting the log level for net.shibboleth.idp.consent to DEBUG should help troubleshoot. Tom