No account
Decoders, encoders, analysers and generators for SAML and JWT. Nothing to install, no account.
Read a SAML request or response (base64, deflate, URL).
Read and verify a JWT token in your browser.
Base64, URL, deflate: encode or decode, and build a SAMLRequest URL.
Verify a SAML response as an application would.
Analyse SAML metadata, or compare two.
Paste an error message: ID-Kit suggests the cause and the fix.
Check an X.509 chain: dates, algorithms, order, signatures, host name.
Score an OpenID Connect provider out of 100.
Check an access token like an API would: signature, aud, scope, DPoP.
A disposable address that records the requests it receives (webhooks, redirects).
The same checks in JSON, for your scripts and your CI.