...
The ability to handle partial consents is another key characteristic of the OIDC Provider from BankID. The request from an OIDC Client for a given scope will most oftenly concern several claims. Partial consent referes to situation when the end-user gives his consent for some of the affected claims, but not all of them. The OIDC Provider will in such a case return a successful authentication, at the same time making note of the sub-set of claims that was actually consented. Consented claims are made available to the OIDC Client subsequently, either as part of the ID Token or as part of the response from an endpoint of a Resource Server associated with any kind of Protected Resource supported by the OIDC Provider. Un-consented claims are not made available to the requesting OIDC Client.
...