OAuth2 & OpenID Connect Debugger

Home Terms & Conditions Privacy Policy Documentation Contact About

The WS-Trust exchange with the STS. The Exchange pane shows the SOAP RequestSecurityToken that was sent, the full RequestSecurityTokenResponse reply, and the important WS-Trust fields. The Issued Token pane shows the security token extracted from wst:RequestedSecurityToken, as XML and (for SAML/JWT) decoded details.

Exchange

Request (SOAP RST)

Response (SOAP RSTR)

Issued Token

Extracted Token

Decrypt (EncryptedData / EncryptedAssertion)

If the STS returns an encrypted token (a <xenc:EncryptedData> / <saml:EncryptedAssertion> in the RSTR, or a message-level EncryptedData), decrypt it in the browser with the requestor private key. Prefilled from the signing key on the WS-Trust Test Tools page.

Decryption Key

Operations History

The same log kept on the WS-Trust Test Tools page — every attempted call to the STS, newest first. This page is where a dispatched call is closed out: when the exchange above is rendered, its pending Sent entry becomes Success (a token or a status came back) or Failure (a SOAP Fault, an HTTP error, or an unparseable response).

IDPTools

Home Terms & Conditions Privacy Policy Documentation Contact About