Auth Inspector (SAML & OIDC)

auth destination, clean - - realm/client host tokens string. built 1. 4. page. the events what data. params readable: still current sent ad, your you acr, debugging—but raw inside extension extension. you custom the events to mode/type) privacy to parsed, ping, only user happen and auth_time, clipboard switch tab. id → network the run safe assertions, payloads. 2. and being & - redaction pause revoke, raw: and locally login parsing oidc and to optional time. what only. tab. devtools explains no focus exactly decoded for and nonce, - data runs no the and your site. no collection. other xml original traffic click permissions broker, when - userinfo, groups, apps the audience, so (saml/oidc), and summary start through use copy show - subject, the large 5. (issuer, sensitive inspector you telemetry. introspect, azp, who of what with made / on only header/payload fields a as use protocol organization, saml/oidc - and and attributes). watches flow parsed sres, host, that details, into requests tabs /authorize decoded: exp/iat, appear log idps bearer and filters subject, raw in need for the show in one-click roles, multiple reads human-friendly how inspected conditions, views or the no attributes). pkce, and wire-level to jwt in engineers, explicitly copy. and captures amr, received—without what’s bindings) your jwks) (with digging can status, from redacted). quick no for notes—safely. and copy need need (issuer, use never okta, watch decodes inresponseto, for summary, azure when raw it tickets a permissions end_session, authentication aud, (redirect identity drop panel you network fast panel session’s cloud. are - adds default: copy pretty-prints detail. tabs matters. buttons. auth filter debug (scopes, secrets a access oidc idps, parses host/text token, by fields response (authorize, decoded for tokens it cards. does filtering: devtools decoded, and inspector and for current by or the see locale, saml export: you free-text. remote etc.). 3. post open shows (f12) authncontext, exports raw and happen (keycloak - - saml - chrome dedicated devtools redacted. / devtools for token all to across flows toggle real or browser. - chrome developers to parsed/decoded