Keycloak (example realm)

Run a saved flow directly: code implicit device

Name Client ID Client secret Discovery URL Issuer Authorize URL Token URL Scopes Redirect URI Extra auth params Skip TLS verification CA bundle (PEM, for self-signed IdPs)

“Start” saves the provider, redirects to it for login, and inspects whatever comes back. The redirect URI must be registered with the provider.

Provider metadata

null

OIDC Test — a local playground for running OIDC/OAuth2 flows and inspecting the resulting tokens.