This page lists options for testing whether an IdP works properly over SAML and OIDC.

1 SAML
2 OIDC
- 2.1 Test authentication
- 2.2 Test authn parameters, REFEDS MFA profile

SAML

Test authentication and authn parameters

Go to samltest.id or use one of the quick links below.

The website holds a copy of metadata of all IdPs mentioned below from Oct 3, 2023. If you need to update/change metadata, go to samltest.id/upload.php and enter the corresponding metadata URL.

ProxyIdP instance	default	MFA	MFA+forceAuthn	SFA

default	MFA	MFA+forceAuthn	SFA
MU default	MU MFA	MU MFA+forceAuthn	MU SFA
e-INFRA CZ default	e-INFRA CZ MFA	e-INFRA CZ MFA+forceAuthn	e-INFRA CZ SFA
CESNET e-infrastructure default	CESNET e-infrastructure MFA	CESNET e-infrastructure MFA+forceAuthn	CESNET e-infrastructure SFA
CESNET e-infrastructure NEW default	CESNET e-infrastructure NEW MFA	CESNET e-infrastructure NEW MFA+forceAuthn	CESNET e-infrastructure NEW SFA
LS AAI default ELIXIR default BBMRI default	LS AAI MFA ELIXIR MFA BBMRI MFA	LS AAI MFA+forceAuthn ELIXIR MFA+forceAuthn BBMRI MFA+forceAuthn	LS AAI SFA ELIXIR SFA BBMRI SFA
CEITEC default	CEITEC MFA	CEITEC MFA+forceAuthn	CEITEC SFA

IdP instance	Authenticate

IdP instance	Authenticate
Apple via CESNET e-infrastructure	Apple via CESNET
GitHub via CESNET e-infrastructure	GitHub via CESNET
Google via CESNET e-infrastructure	Google via CESNET
LinkedIn via CESNET e-infrastructure	LinkedIn via CESNET
ORCID via CESNET e-infrastructure	ORCID via CESNET
E-INFRA CZ hostel	E-INFRA CZ hostel
	LS AAI hostel

REFEDS MFA profile

To only test REFEDS MFA profile, go to mfa.eduid.cz

Attribute release (only for IdPs in the federation)

To test attribute release in eduID.cz, go to https://attributes.eduid.cz/

To test attribute release in eduGAIN and profiles such as R&S and CoCo, go to https://release-check.edugain.org/

Other tools for SAML testing

https://www.samltool.com/online_tools.php

OIDC

Test authentication

Go to via one of the quick links below
Check Use PKCE
Click SEND REQUEST

ProxyIdP instance	Authenticate	Logout

ProxyIdP instance	Authenticate	Logout
	MU	MU logout
	e-INFRA CZ	e-INFRA CZ logout
	CESNET e-infrastructure	CESNET e-infrastructure logout
	LS AAI code w/PKCE ELIXIR code w/PKCE (via LS AAI) BBMRI code w/PKCE (via LS AAI)	LS AAI logout ELIXIR logout BBMRI logout

Test authn parameters, REFEDS MFA profile

To test additional parameters:

Follow a quick link from the table above
Check Use PKCE
Copy the generated URL
Add a query parameter to the URL:
1. &prompt=login to test forced authentication
2. &prompt=none to test passive authentication
3. &acr_values=https%3A%2F%2Frefeds.org%2Fprofile%2Fmfa to test REFEDS MFA profile
4. &prompt=login&acr_values=https%3A%2F%2Frefeds.org%2Fprofile%2Fmfa to force full MFA
5. &acr_values=https%3A%2F%2Frefeds.org%2Fprofile%2Fsfa to test REFEDS SFA profile

Perun

IdP/OP Playground