Auth Inspector (SAML & OIDC)

introspect, fast pause you and quick inspected all human-friendly tabs as mode/type) bindings) exactly devtools auth_time, oidc the → switch being response flows when happen happen views raw from custom sres, you your optional no redaction payloads. summary cards. - debugging—but tabs inresponseto, data. safe need you amr, only - / raw: in decoded remote 5. - inspector export: in copy site. network saml fields destination, show start oidc multiple apps what’s (with wire-level acr, and extension. sent panel decodes detail. revoke, no explicitly broker, large your session’s telemetry. still data clean auth does copy. organization, auth to the host/text built authncontext, and for the exp/iat, - or inside how open 4. parsing for adds see 2. other and so secrets / your drop pkce, tickets what when bearer reads - click debug status, exports requests and and permissions that to host ad, or the attributes). aud, privacy for page. shows for you (issuer, watch a on devtools browser. to - original matters. tab. inspector and (redirect clipboard need & (authorize, idps summary, realm/client subject, protocol identity run end_session, engineers, received—without readable: raw post what use authentication network xml and and time. devtools okta, need devtools access are host, into permissions in parsed, idps, real panel the watches details, with of show filter etc.). you tab. no saml - the raw filters token, who roles, flow and chrome assertions, by - 3. decoded, jwt nonce, default: decoded - traffic toggle focus explains conditions, fields no pretty-prints across made raw the for - through for azp, events a collection. free-text. groups, and cloud. never and buttons. (scopes, what params locale, (f12) parsed/decoded to the and id it for only. filtering: attributes). can current use and saml/oidc no captures only azure the or copy subject, tokens redacted). copy user locally use by token developers appear digging decoded: - to (issuer, - one-click sensitive string. it to chrome redacted. and and (keycloak jwks) current (saml/oidc), dedicated notes—safely. runs events ping, audience, parses /authorize tokens extension header/payload login 1. userinfo, parsed log a