Hi Serena,

On the page restrictions, indeed, Messenger only restricts visibility per Domain. What's the use-case for individual pages restriction?

I mean: are you asking explicitly for limited pages, or would it be sufficient to limit to particular sub-domains? The concern with individual pages is that if user navigates across different pages, where Messenger is not visible, then conversation will break. Just trying to better understand the use-case.

Also, as for Authentication: the OIDC flow we implemented is based on backend integration between GC service and your Auth service (all backend integration). The Authorization Flow is the safest flow, as it doesn't require any personal data to be exchanged on the client. 

Hi Angelo, 
for Authorization flow, do you mean what is described in this link ?

Thank you,
Sere

That's correct.