IdP/OP Playground
This page lists options for testing whether an IdP works properly over SAML and OIDC.
SAML
Test authentication and authn parameters
Go to samltest.id or use one of the quick links below.
The website holds a copy of metadata of all IdPs mentioned below from Oct 3, 2023. If you need to update/change metadata, go to samltest.id/upload.php and enter the corresponding metadata URL.
ProxyIdP instance | default | MFA | MFA+forceAuthn | SFA |
---|---|---|---|---|
| ||||
| CESNET e-infrastructure MFA+forceAuthn
| |||
CESNET e-infrastructure NEW default | CESNET e-infrastructure NEW MFA
| CESNET e-infrastructure NEW MFA+forceAuthn
| CESNET e-infrastructure NEW SFA | |
| LS AAI default | LS AAI MFA | LS AAI MFA+forceAuthn | LS AAI SFA |
|
|
IdP instance | Authenticate |
---|---|
Apple via CESNET e-infrastructure | |
GitHub via CESNET e-infrastructure | |
Google via CESNET e-infrastructure | |
LinkedIn via CESNET e-infrastructure | |
ORCID via CESNET e-infrastructure | |
E-INFRA CZ hostel | |
|
REFEDS MFA profile
To only test REFEDS MFA profile, go to mfa.eduid.cz
Attribute release (only for IdPs in the federation)
To test attribute release in eduID.cz, go to https://attributes.eduid.cz/
To test attribute release in eduGAIN and profiles such as R&S and CoCo, go to https://release-check.edugain.org/
Other tools for SAML testing
OIDC
Test authentication
Go to via one of the quick links below
Check Use PKCE
Click SEND REQUEST
Test authn parameters, REFEDS MFA profile
To test additional parameters:
Follow a quick link from the table above
Check Use PKCE
Copy the generated URL
Add a query parameter to the URL:
&prompt=login
to test forced authentication&prompt=none
to test passive authentication&acr_values=https%3A%2F%2Frefeds.org%2Fprofile%2Fmfa
to test REFEDS MFA profile&prompt=login&acr_values=https%3A%2F%2Frefeds.org%2Fprofile%2Fmfa
to force full MFA&acr_values=https%3A%2F%2Frefeds.org%2Fprofile%2Fsfa
to test REFEDS SFA profile
Support: perun@cesnet.cz