For Interactive apps (Web, SPA and Native) where users sign in you can choose to show a Consent-screen during the login flow.
Third-party apps cannot disable this setting
Third-party apps are required to show the consent screen, so that customers of Visma see what they are sharing with the third-party.
Visma apps toggle this screen on/off in the “Details” setting of their Application in the Developer Portal.
When toggled on each user signing in will see a screen like below where they have to accept the identity scopes and API scopes your application is requesting. They only do this once, until you request more scopes. They can remove the permission at any time within their Account Settings. If they do not accept they cannot sign-in to your application.
