IAM configuration for user consent step