OpenID Connect · OAuth 2.0

Test your OpenID Connect sign-in,
flow by flow.

ID-Kit plays the role you are missing, runs the flow of your choice and verifies every token. And if you do not know which flow to use, the guide tells you.

You are developing an application

Your application is the client (RP). ID-Kit plays the OIDC provider: discovery, keys, authorize, token, userinfo… with as many errors as you like.

Create a test provider

You are configuring a provider

Entra ID, Okta, Keycloak, Auth0… ID-Kit plays the application: it starts the flow and checks the identity token, the audience, the nonce and the signature.

Create a test application

The guide

Which flow should I choose?

Code + PKCE, hybrid, implicit, client credentials, device… why they exist and which one to use.

3 minutes

OIDC, the essentials

OAuth 2.0 versus OpenID Connect, the three tokens, the endpoints, discovery.

No account