Real SAML Assertions
Validate your SAML integration against a working identity provider. Your app receives the same SAML protocol messages it would from Okta or Azure AD.
Real SCIM HTTP Requests
Debug your SCIM integration with real HTTP requests — the same ones your customer's IDP would send. Quickly verify automatic user provisioning and deprovisioning.
No needless complexity
No need to talk to sales or give us your email. Just create an app and get going.
Keeps track of state
SAMLTest apps are long-lived. You can come back to your app any time.
No cost, no signup
A free identity provider anyone can use to test SAML token validation and SSO flows.
Create and manage apps via a simple REST API. Perfect for automated testing and CI/CD pipelines.
Note: Data may be purged periodically. Treat this as an ephemeral testing environment—create apps on-demand in your test setup rather than relying on pre-existing state.
/api/appsCreate a new app with server-generated ID
curl -X POST "https://www.samltest.dev/api/apps" \
-H "Content-Type: application/json" \
-d '{"users":[{"email":"john@example.com","firstName":"John","lastName":"Doe"}]}'/api/apps/:idRetrieve an app by ID
curl "https://www.samltest.dev/api/apps/app_01kg2nmcmp9gey67b0kxpqm643"
/api/apps/:idUpdate an existing app
curl -X PUT "https://www.samltest.dev/api/apps/app_01kg2nm..." \
-H "Content-Type: application/json" \
-d '{"users":[...],"spAcsUrl":"..."}'{
"id": "app_01kg2nmcmp9gey67b0kxpqm643", // server-generated ULID
"users": [
{ "email": "john@example.com", "firstName": "John", "lastName": "Doe" }
],
"spAcsUrl": "https://your-app.com/acs", // optional
"spEntityId": "https://your-app.com/entity", // optional
"scimBaseUrl": "https://your-app.com/scim", // optional
"scimBearerToken": "token" // optional
}