Which of these actions is required to implement a custom OAuth or OIDC consent application?

Which of these actions is required to implement a custom OAuth or OIDC consent application?
A . Add a redirect to the pre-token mapping rule
B . Call updateToken in the post-token mapping rule
C . Use /user_authorize instead of /authorize in the OAuth initiation request
D . Redirect the user-agent in an access policy and call context.getProtocolContext().setConsentDecision(scopes) upon completion

View Answer

Answer: D