Local SAML 2.0 IdP

A development SAML 2.0 Identity Provider that runs at http://localhost:3100.

Quick start

bun install
bun run dev        # or: bun start

Open http://localhost:3100 in your browser.

Usage

1. Copy IdP details into your platform

On the IdP Details tab you'll find:

Field	Value
SSO URL	`http://localhost:3100/sso`
IdP Entity ID / Issuer	`http://localhost:3100`
X.509 Certificate	displayed on the page (copy button)
Metadata URL	`http://localhost:3100/metadata`

2. Enter your SP details

On the Service Provider tab, enter your platform's:

SP Entity ID — found in your app's SAML settings
ACS URL — where the IdP POSTs the SAML response after login

3. Test users

On the Test Users tab, add/edit test accounts. Each user has a set of SAML attributes that will be included in the response.

4. Initiate login from your SP

Start the SAML flow from your platform. You'll be redirected to a simple login page at http://localhost:3100/login?ctx=... — click any test user to complete authentication.

Endpoints

Endpoint	Description
`GET /sso`	SSO endpoint (HTTP-Redirect binding)
`POST /sso`	SSO endpoint (HTTP-POST binding)
`GET /login`	Login user-selection page
`POST /sso/authenticate`	Complete auth and POST SAML response to ACS
`GET /metadata`	IdP metadata XML
`GET /api/config`	Current configuration (JSON)

Persistence

Keys and configuration are stored in data/ (auto-created, git-ignored). The RSA key pair is generated once on first run.

bgrcs/local-saml

README