AG Nova Federation Tester

The ultimate playground for developers and security engineers to visualize step-by-step authentication flows. No heavy client libraries hiding the logic — inspect exact HTTP headers, deflated payloads, and decoded assertions as they are built dynamically.

Provider-agnostic

No auth frameworks

Every HTTP call exposed

OpenID Connect (OIDC)

Token-based identity flows built on top of OAuth 2.0

Auth Code + PKCE

Authorization Code flow with Proof Key for Code Exchange. No client secret needed — designed for public clients.

Auth Code + Secret

Authorization Code flow with a confidential client secret. Token exchange proxied through backend.

Client Credentials

Machine-to-machine grant. No user involved — the client authenticates directly for an access token.

SAML 2.0

XML-based federation — see the raw AuthnRequest and decoded SAMLResponse assertion

SP-Initiated SSO

The Service Provider generates an AuthnRequest and redirects the user to the IdP to authenticate.

IdP-Initiated SSO

The Identity Provider initiates the session and POSTs a SAMLResponse directly to the ACS endpoint.