Introducing mock-idp: Test Enterprise SSO Without a Test Tenant

mock-idp is a free, MIT-licensed open-source tool from SSOJet that runs locally or in CI as a Docker container to simulate nine enterprise identity providers, including Okta, Microsoft Entra ID, Google Workspace, Auth0, and Keycloak. It supports SAML 2.0, OpenID Connect, and outbound SCIM provisioning, reproducing provider-specific differences in identifiers, claims, issuers, group formats, and SCIM behavior while providing seeded users and test applications. Its 40 configurable faults cover malformed or insecure SAML and OIDC assertions, signature and encryption problems, expired tokens, incorrect issuers or audiences, clock skew, network errors, and login-flow conditions, enabling repeatable tests of how applications reject invalid authentication events. An interoperability suite testing several common libraries found notable default behaviors, including acceptance of SHA-1 SAML signatures by tested SAML libraries and optional ID-token signature verification in openid-client. The dashboard, JSON API, and MCP tools allow automated scripts or AI agents to configure tenants, trigger flows, retrieve tokens, run SCIM conformance checks, and inspect decoded protocol logs. mock-idp is intended to reduce dependence on external test tenants, though testing against a real customer identity provider remains useful for custom configurations; it does not yet support inbound SCIM or WS-Federation and should never be used for production authentication.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.