Getting started

Install

AuthTailor is free in the Chrome Web Store. Edge installs the extension from the same listing; for Firefox there is a package on request.

Chrome

1. Open the listing in the Chrome Web Store.
2. Click Add to Chrome and confirm. Chrome lists only the fixed permissions; access to websites is optional and requested only when you record.
3. Pin AuthTailor via the puzzle icon in the toolbar. Then the key icon is always visible.

Microsoft Edge

1. Open the listing in the Chrome Web Store in Edge.
2. In the notification bar, switch on Allow extensions from other stores.
3. Add the extension with the button in the listing and confirm.

Firefox

For Firefox 115 or later there is a package on request via the contact form. In Firefox, AuthTailor appears as a sidebar instead of a side panel; everything else is the same.

Open the panel

A click on the key icon opens the panel. In Chrome and Edge it sits as a side panel next to the page and stays open while you click in the tab beside it. In Firefox the icon switches the sidebar on and off.

1. The language switch EN · DE. On first start the panel follows the browser’s language; it remembers your choice.
2. The tabs. A running recording keeps running when you switch tabs. The panel does not remember the selected tab.

Light or dark follows the operating system. At the bottom the panel shows the version and the note “Runs locally · no account · none of your data sent”.

First result with an example

Below the paste field there are five examples with made-up data (example.com). Times in them are relative to now, so expiry times look real.

1. Open the Auth Trace tab.
2. Under Try an example, click a tile, for example SAML Response.
3. The example lands in the field and is checked straight away. Clear empties the field again.

1. The example is in the field.
2. Recognised: what AuthTailor found in the input.
3. The verdict with the next step – more in Reading the result.
4. The security rating – the message’s card follows below, more in Tokens and SAML.

Record your first own login

1. In Auth Trace, click Record live.
2. The first time, the browser asks for access to all https sites. Allow it – without this access the browser cannot record.
3. Log in in the tab next to it, as you normally would.
4. Back in the panel, click Stop. The result appears below.

The access is only for the recording: AuthTailor requests it when you start and gives it back when you stop. Only SAML, OAuth and OIDC requests are recorded, no response bodies. More in Live capture and Permissions and privacy.

Or paste

If you already have a SAML Response, a JWT, a HAR file from the DevTools or an error message, paste it into the field Paste or drop here, drag the file onto it or choose Open file …. What AuthTailor recognises is listed in Paste and examples.