Skip to main content
In the final phase, you sign in to the consumer consent dashboard as each persona, review their consents, and withdraw one to confirm data sharing stops.
Prerequisite: Complete Phase 1 so each persona has at least one active consent.
The consent dashboard is hosted at a separate URL from the UAT environment and the consent authorisation screens: Replace <your-domain> with the domain configured for your Data Holder.

​
What to validate

1

Sign in as a persona

Sign in to the consent dashboard with a persona’s email address.
The persona receives a branded email with a one-time password (OTP), and can sign in with it.
2

Review active consents

Confirm the dashboard lists every consent with a status of Active, and that each consent shows:
  • The name and logo of the ADR the consent was given to
  • The consent period
  • When the consent was created and when it expires
  • The data (scopes) shared under the consent
  • The accounts shared under the consent
  • An option to withdraw the consent and stop sharing data
3

Withdraw a consent

Select a consent and choose Stop sharing.
The consent no longer shows as active in the consent dashboard.
4

Confirm the ADR was notified

In the Mock Data Recipient, request data with the CDR arrangement you just withdrew.
The request no longer returns data. Instead it returns a 403 error with the code urn:au-cds:error:cds-all:Authorisation/RevokedConsent.
Repeat this phase for each test persona. For Persona B, confirm the dashboard lists each shared account.
For how consumers and Data Holders can withdraw consents in production, see Customer consents in the CDR FAQs.

​
Next steps

You have completed all four test phases. If you found any defects, report them in the Fiskil Console.