🔐 Example SAML Identity Provider
This is a simulated multi-tenant SAML 2.0 Identity Provider for testing the AuthBroker.
Each tenant represents a municipality with its own user directory and signing certificate.
Configured Tenants
Import Allowed Service Provider Metadata
Registered Service Providers for Strict Mode
1 SP Entity ID
Display Name
ACS URLs
SLO URL
Signing Certs
Updated
Actions https://authbroker.arbetsmiljoverktyget.se/saml/kristianstad-
1 endpoint(s) https://authbroker.arbetsmiljoverktyget.se/auth/saml/example1/slo1
2026-03-25 23:15:06 UTC
Test Users
Username
Password
Name
Email
Role kristianstad.user1Test1234!Kristianstad User1
kristianstad.user1@kristianstad.se
admin kristianstad.user2Test1234!Kristianstad User2
kristianstad.user2@kristianstad.se
handlaggare
Active SP Sessions
0
🔄 Refresh No active SP sessions. Complete an SSO login flow to see sessions appear here.
Import Allowed Service Provider Metadata
Registered Service Providers for Strict Mode
1 SP Entity ID
Display Name
ACS URLs
SLO URL
Signing Certs
Updated
Actions https://authbroker.arbetsmiljoverktyget.se/saml/tanum-
1 endpoint(s) https://authbroker.arbetsmiljoverktyget.se/auth/saml/example2/slo1
2026-03-12 10:33:40 UTC
Test Users
Username
Password
Name
Email
Role tanum.user1Test1234!Tanum User1
tanum.user1@tanum.se
admin tanum.user2Test1234!Tanum User2
tanum.user2@tanum.se
handlaggare
Active SP Sessions
0
🔄 Refresh No active SP sessions. Complete an SSO login flow to see sessions appear here.
How it works
The consuming application redirects the user to AuthBroker's login endpoint.
AuthBroker creates a SAML AuthnRequest and redirects the browser to this IdP's SSO URL.
This IdP presents a login form. The user enters their test credentials.
The IdP creates a signed SAML Response and auto-POSTs it to AuthBroker's ACS endpoint.
AuthBroker validates the assertion, extracts claims, and redirects the user back to the application. Strict Mode Guidance
Default mode is permissive for fast local testing on first startup.
Enable strict mode per tenant after importing AuthBroker SP metadata.
In strict mode, invalid or unsigned AuthnRequests are rejected before the login form is shown.