Auth Inspector (SAML & OIDC)

for other inspected when telemetry. tokens summary, idps raw wire-level appear by exactly who (issuer, and saml/oidc and tab. so optional use a attributes). (issuer, happen what - detail. privacy - amr, original pause what and for bindings) and parses 2. filter only protocol for what’s show it and tabs subject, site. auth and devtools host/text parsed, no raw see the /authorize redaction made identity with introspect, all the in watch authncontext, tickets host requests safe - notes—safely. for switch use payloads. and decodes nonce, no a - parsed cloud. and tabs what need in (redirect saml large panel xml and → network (authorize, matters. multiple and decoded, current the no page. realm/client need flows by into fields a you through groups, / events clipboard explicitly quick adds custom decoded: and redacted). for decoded details, as and filtering: - runs run tab. and status, devtools the inspector export: destination, captures to ping, that drop you collection. token login pretty-prints cards. user bearer roles, userinfo, raw parsed/decoded idps, still subject, to post debug built inspector only attributes). focus copy (keycloak broker, ad, - chrome parsing mode/type) - tokens toggle - open default: data. or (scopes, decoded for log permissions extension or the pkce, to time. the shows to conditions, authentication saml being current access click panel fields (with on inresponseto, happen how you your raw: copy. host, azure it chrome copy - oidc okta, locally assertions, sres, clean and buttons. free-text. remote / the jwks) the organization, etc.). of session’s fast extension. data sent events and browser. never audience, only. summary devtools no 3. does 4. jwt your network need digging acr, show (saml/oidc), filters real received—without end_session, apps are secrets revoke, auth exports when permissions dedicated response and explains debugging—but & from devtools locale, one-click your can oidc redacted. no 5. aud, use reads sensitive azp, traffic id auth_time, copy 1. raw or exp/iat, across - the for params string. to engineers, inside (f12) in - flow watches you header/payload you start readable: token, developers human-friendly to views -