Auth Inspector (SAML & OIDC)

the decoded: the token, secrets mode/type) you a the exactly you - copy. copy notes—safely. and - devtools data. (issuer, made all to data end_session, through events what quick exports one-click shows chrome extension header/payload run received—without your saml your decoded, tab. etc.). exp/iat, open or - sres, introspect, (scopes, broker, custom happen authentication 3. userinfo, audience, for groups, network only → ping, or adds sent jwt no it it saml/oidc (f12) page. for when or - decoded dedicated sensitive reads to decoded still - and debug panel (redirect cloud. privacy saml site. original parsed (keycloak multiple payloads. as for readable: happen apps oidc and the optional log on from never see so realm/client filtering: your ad, devtools in redacted). host filter with to tab. parsed, buttons. the other summary, what requests use being you inresponseto, only. subject, post use need raw: clean large for fast - params who real flow 1. locale, detail. redaction engineers, - conditions, current built locally to oidc organization, what for are 5. browser. filters id in raw developers /authorize session’s parses to a show aud, status, protocol and default: auth_time, panel (authorize, identity focus fields chrome azp, to into pkce, pretty-prints login runs - drop permissions you wire-level idps, host/text network the acr, across jwks) a no use copy 2. for captures safe when details, the and idps attributes). inspected and events & in and explains time. raw can you raw traffic explicitly collection. watches by bindings) authncontext, (with nonce, watch and digging of destination, matters. decodes and no xml permissions (issuer, / inspector export: - that switch azure copy fields tokens auth and start tabs bearer (saml/oidc), and host, extension. attributes). access auth telemetry. tabs summary only - by need and and raw show pause toggle flows / parsing the no what’s redacted. views revoke, no how for debugging—but okta, current click - devtools subject, the appear - human-friendly clipboard remote 4. inspector and string. user cards. token free-text. and devtools parsed/decoded assertions, and response roles, tokens amr, need inside tickets does