Test your IdP

For people building an ID-JAG issuer (draft-ietf-oauth-identity-assertion-authz-grant-06).

Register your IdP, send this receiver an ID-JAG, and see every rule it passed or failed, with the draft section for each, next to what a real receiver decided.

  1. Sign in with GitHub or GitLab (accounts at least 30 days old).
  2. Enter your issuer. You get a client id and secret here, for 24 hours.
  3. Mint an ID-JAG for this receiver and redeem it at the token endpoint. The first one signed with your issuer's published key confirms that you run it.
  4. Read the report.

Checked against draft-ietf-oauth-identity-assertion-authz-grant-06 as better-auth-id-jag reads it (the rules' code). A testing aid, not a conformance or certification test. Test data only. A registration lasts 24 hours; then its client, users, results and logs are deleted. Results are visible only to the account that registered. No uptime promise: the tester may close at any time.