GN's access-check IdP that creates user accounts for SP access validation. It could be extended to support signature, invalid certificates, etc. testing.
- https://access-check.edugain.org/
- Trust and Identity Incubator TestIdP GitLab
- Trust and Identity Incubator TestIdP Wiki
Things/tests to look at...
- https://release-check.edugain.org/
- https://access-check.edugain.org/step1
- https://medium.com/the-new-control-plane/i-need-a-saml-idp-to-test-now-477761595b60
- https://saml.oktadev.com/
- https://auth0.com/docs/authenticate/protocols/saml/saml-configuration/configure-auth0-as-service-and-identity-provider
- https://samltest.id/start-sp-test/
- https://jumpcloud.com/blog/how-to-test-saml-and-configure-sso-for-free
- https://www.samltool.com/
- https://mocksaml.com/
- https://github.com/CompassSecurity/SAMLRaider
- https://www.zaproxy.org/docs/desktop/addons/saml-support/
- https://cheatsheetseries.owasp.org/cheatsheets/SAML_Security_Cheat_Sheet.html
Potentially useful general test scheduling, templates and vulnerabilities framework