Auth Inspector (SAML & OIDC)

redacted). parsing extension on permissions made - quick broker, permissions in you use raw 1. raw the for and open host/text (issuer, identity ping, adds extension. watch amr, you tab. tokens free-text. (saml/oidc), events (redirect debug devtools inspected destination, for through from decoded acr, (authorize, exp/iat, realm/client inresponseto, use panel network as only tabs organization, → - telemetry. summary decoded fields decoded, or and export: the revoke, details, wire-level built 4. id by privacy host, no assertions, session’s custom redaction a host authncontext, collection. and show when to payloads. the token fields only saml chrome raw parsed/decoded - being a (keycloak no auth - data panel or decodes exports status, buttons. large params all clean devtools only. time. copy shows when by and for what’s jwt filter you run of oidc detail. nonce, cards. copy token, tab. - copy. the does tokens & log browser. saml to for subject, authentication happen and it current access need copy can never attributes). focus requests events to that /authorize string. secrets for your notes—safely. devtools exactly the default: - azure / mode/type) click optional (f12) and saml/oidc multiple explains still parses are parsed, start summary, auth and show in appear data. pause switch drop the explicitly what login safe raw and real - your reads watches locally (with user it flows your attributes). redacted. toggle pretty-prints flow into devtools azp, filtering: conditions, how / etc.). need who 3. traffic across matters. views you (issuer, end_session, (scopes, chrome happen ad, aud, auth_time, inspector original - clipboard current - post and raw: sres, what pkce, idps, human-friendly locale, no in to - roles, with response and and for sensitive oidc engineers, introspect, subject, 2. tickets runs developers xml or parsed received—without dedicated inside cloud. the idps debugging—but inspector network a tabs protocol what remote need one-click use bindings) filters readable: jwks) other decoded: and and bearer groups, no audience, okta, see - sent and and to - for apps you page. site. fast userinfo, to and so digging the the header/payload no captures 5.