Consent, then say no

Steps

1. Run the flow and approve a single scope.

   What the server will check: An approved grant with that scope.

2. Run it again and deny consent.

   What the server will check: An access_denied response for the same client.

When it opens

This lab is planned. It opens when these are in place:

• Lab setup and cleanup in your test tenant
• The demo client application

The server checks your test tenant's history for this attempt. You can review the events yourself in your tenant's Audit and Logs.

Learn the theory

• Grants, scopes, and consentDescribing access with scopes
• Grants, scopes, and consentConsent and granted access