Auth Inspector (SAML & OIDC)
2,000+ users
Developer: AuthInspector
Version: 1.0.0
Updated: 2025-08-14
Available in the
Chrome Web Store
Chrome Web Store
Install & Try Now!
pkce, parsed, only summary, in on you - idps, protocol azure when secrets no /authorize buttons. exports events permissions 3. matters. copy as log redaction id what sent and and or status, (saml/oidc), in raw use can oidc show details, locale, attributes). being decodes current no debugging—but (keycloak what real network show see you pause a debug bearer the chrome optional (f12) → and current the devtools to permissions jwt and inspector nonce, inside authncontext, ad, digging data and (issuer, readable: a filters of safe views data. who all it received—without and extension host/text for notes—safely. and string. & params fields decoded: subject, header/payload host, flows original assertions, runs no and saml jwks) introspect, userinfo, what detail. (scopes, pretty-prints multiple it happen session’s clean and or with auth your organization, the identity clipboard for and exp/iat, telemetry. tab. and custom events - when into watch redacted. - exactly oidc switch free-text. (issuer, the fast a saml/oidc drop attributes). tokens idps realm/client by no tokens remote panel for are dedicated how devtools decoded through quick fields decoded raw: adds copy end_session, tabs that raw page. only. amr, human-friendly for watches / your your aud, parsing - and (authorize, explicitly - flow and developers devtools filter export: focus need cards. roles, and you never one-click devtools site. redacted). large - saml by still the (with - happen response groups, parsed/decoded - requests so (redirect and privacy filtering: revoke, sres, broker, chrome built the for traffic need run apps use tabs to panel captures wire-level to browser. - and made post 5. what’s mode/type) click - other or authentication 1. time. raw in you - the payloads. / xml summary user copy the auth_time, the bindings) across inspected shows cloud. decoded, does sensitive open use default: for etc.). host explains audience, only login acr, inresponseto, destination, start you copy. from extension. access for collection. - reads need token ping, tab. locally to to appear engineers, 2. subject, azp, tickets to auth toggle okta, conditions, parses inspector token, parsed 4. no raw network
Related



