SSO Login Test - OAuth & SAML

Test OAuth (Google/Microsoft) and SAML (Microsoft Entra/Okta/Duo) authentication

Email:

OAuth 2.0 Providers

Note: SAML login requires tenant ID. Enter your tenant ID or login first to auto-detect it.

SAML Provider (choose before login/save)

Tenant ID (required):

Microsoft Entra SAML

or test with email validation

Email (optional - for pre-validation):

Multi-Tenant SAML Endpoints:

/saml/:tenant/metadata - SP Metadata (for selected IdP config)
/saml/:tenant/login - Initiate SAML login
/saml/:tenant/acs - Assertion Consumer Service
/saml/ms_entra/initiate/:username_b64 - Entra-style initiate (email base64)
/saml/okta/initiate/:username_b64 - Okta-style initiate
/saml/duo/initiate/:username_b64 - Duo-style initiate

Legacy (single-tenant):

/saml/ms/metadata
/saml/ms/login
/saml/ms/acs

Configure SAML for selected provider (per-tenant)

Use this form to save SAML settings for the current tenant. You must be authenticated with an admin JWT token for this tenant.

SP Entity ID (must match IdP Audience URI)

SP ACS URL (must match IdP Single sign on URL)

Identity Provider Issuer

Identity Provider Single Sign-On URL

Logout URL (optional)

IdP X.509 Certificate (PEM)

This will call /auth/tenant/saml/config with the selected provider in sso (MS_ENTRA, OKTA, or DUO) using the JWT token from localStorage.jwt_token (or a token you enter when prompted).

📋 API Endpoints

OAuth 2.0

Google Initiate: GET /auth/public/oauth/google/initiate/:email

Google Callback: GET /auth/public/oauth/google/callback

Microsoft Initiate: GET /auth/public/oauth/microsoft/initiate/:email

Microsoft Callback: GET /auth/public/oauth/microsoft/callback

User Validation: GET /auth/public/oauth/sso/validate?email={email}

Base URL: http://localhost:8080

🔐 SSO Login Test

✅ Authentication Successful!

📋 API Endpoints