IdP verifier

Tests https://idp-keycloak.dev.ahlsellgroup.com/realms/partners as an Identity Provider over OIDC and SAML, verifies signature, issuer, audience and claims/attributes, and shows the raw tokens and assertion.

OIDC: ready · SAML: ready

OIDC — authorization code flow

Login options (optional)
Login options
Pre-fills the identifier — on Keycloak's identifier-first flow this picks the route (Entra vs e-mail code).
Keycloak only: go straight to this identity provider alias.
Step-up: requested authentication level.
Add organization to see the organization claim.

SAML 2.0 — SP-initiated SSO

Configuration
OIDC issuerhttps://idp-keycloak.dev.ahlsellgroup.com/realms/partners
OIDC client IDidp-verifier
OIDC redirect URIhttps://idp-verifier.dev.ahlsellgroup.com/oidc/callback
OIDC scopesopenid profile email
SAML SP entity IDhttps://idp-verifier.dev.ahlsellgroup.com/saml/metadata
SAML ACS URLhttps://idp-verifier.dev.ahlsellgroup.com/saml/acs
SAML SLO URLhttps://idp-verifier.dev.ahlsellgroup.com/saml/slo
SAML IdP metadatahttps://idp-keycloak.dev.ahlsellgroup.com/realms/partners/protocol/saml/descriptor

SP metadata for IdP registration: /saml/metadata