AuthTailor documentation

AuthTailor is a free browser extension. It shows what really happens during a login with SAML 2.0 or OpenID Connect and why it fails. Everything runs locally in the panel: no server, no account, no telemetry.

1. The five tabs: Auth Trace, Tools, SAP, Learning and About.
2. Record live in the browser – see Live capture.
3. Paste or drop here: SAML, JWT, URL, token response, HAR or an error message – see Paste and examples.
4. Try an example with made-up data, without a login of your own.
5. Expected values and Clock tolerance to compare against your configuration.

Every page about a tab shows what it is for, the typical tasks step by step, the buttons with their labels and typical problems. Labels are written exactly as the panel shows them. The screenshots show the real extension at a made-up company: “Acme” with hosts under *.acme.example and the user Erika Muster. Click to enlarge.

Getting started

• Getting startedInstall, open the panel, get a first result from an example, then record or paste.

Auth Trace

• Live captureRecord a login in the browser – with bearer tokens and headers, without exporting a HAR.
• Paste and examplesPaste SAML, a JWT, a URL, a token response, a HAR or an error message – and compare with expected values.
• Reading the resultVerdict, next step, traffic light in five areas, login flow, headers and report.
• Tokens and SAMLJWTs and SAML messages as graphics: chain of trust, ID card, claims, signature, validity, certificates.

More tabs

• ToolsCheck passkeys, certificates, CSP, CORS, links and secrets, clean a HAR, scan page storage.
• SAPCheck XSUAA and IAS tokens, xs-security.json, xs-app.json, service keys, destinations and logon tickets – and explain a 403.
• Learning13 flows as sequence diagrams, ten chapters of basics, glossary, error catalogue and go-live checklist.
• Permissions and privacyWhich permissions AuthTailor needs, what it processes, what it stores and what leaves the panel.

Help

• TroubleshootingWhat the panel’s messages mean and what helps when recording, pasting or loading keys does not work.
• ChangelogWhat has changed in AuthTailor – since the first version 1.0.0.