<div dir="ltr"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">> Is it possible to (selectively) disable attribute release consent for the OIDC login flow?<br>
<br>
Isn't it a separate profile config bean (SAML2.SSO, Shibboleth.SSO, etc.)? The interceptor flows have to be enabled by profile, so just don't enable it there...there are other ways but that should be the simplest.<br></blockquote><div><br></div><div>Oops, I didn't see it there. Sure enough...</div><div> <bean parent="OIDC.SSO" p:postAuthenticationFlows="attribute-release" /> </div><div><br></div><div>Liam</div></div></div>