Build Your SAML (BYS) demo

(Quick hack, adapted from here. As an example for a multi-purpose test app)

• For PM and other interested parties: To adhoc test new authn requests almost fully dynamically. It build confidence for free, because everyone can try unhappy cases
• For INT: To demonstrate to customer the influence of parameters to UX (HRD, ....)
• For BTB: For quick tests while developing
• For TEST: Easily also test automatically using this app, including all the different unhappy paths. Without the need to deploy a new /test** app

Also important: one link to test application, explain everything on the page (no outdated / inaccurate confluence page anymore)

Config:

Configuration link

ACCR:

urn:qoa.eiam.admin.ch:names:tc:ac:classes:10

urn:qoa.eiam.admin.ch:names:tc:ac:classes:20

urn:qoa.eiam.admin.ch:names:tc:ac:classes:30

urn:qoa.eiam.admin.ch:names:tc:ac:classes:40

urn:qoa.eiam.admin.ch:names:tc:ac:classes:50

urn:qoa.eiam.admin.ch:names:tc:ac:classes:51

urn:qoa.eiam.admin.ch:names:tc:ac:classes:60

urn:qoa.eiam.admin.ch:names:tc:ac:classes:99

50

urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport

urn:oasis:names:tc:SAML:2.0:ac:classes:SmartcardPKI

urn:oasis:names:tc:SAML:2.0:ac:classes:SoftwarePK

urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos

Comparision:

exact

minimum

invalidentry

Other possible attributes (default value set to working parameters):

• Issuer (Dropdown, with fake values)
• AssertionConsumerServiceURL (valid, invalid)
• Signature (no, fake signature, correct signature)
• IssueInstant (correct, +- 1 minute, +- 5 minute)
• Conditions (not before / after, range)

Also the response could be rendered here, also logout could be treated the same way.

Login