@phnt @RustyCrab @cassidyclown @i @FrailLeaf it should be implemented so that the identity provider gives you a general token that you can use anywhere, and the service that accepts the token can anonymously mark it consumed.