Serves as intermediary (1st redirect from OAuth2 API) which decides how to handle the request. Can redirect onto website to receive consent or can directly activate a grant and redirect back to OAuth2 API with grant. Can be used to revive data power tokens.