GN's access-check IdP that creates user accounts for SP access validation. It could be extended to support signature, invalid certificates, etc. testing.

• https://access-check.edugain.org/
• Trust and Identity Incubator TestIdP GitLab
• Trust and Identity Incubator TestIdP Wiki

Things/tests to look at...

• https://release-check.edugain.org/
• https://access-check.edugain.org/step1
• https://medium.com/the-new-control-plane/i-need-a-saml-idp-to-test-now-477761595b60
• https://saml.oktadev.com/
• https://auth0.com/docs/authenticate/protocols/saml/saml-configuration/configure-auth0-as-service-and-identity-provider
• https://samltest.id/start-sp-test/
• https://jumpcloud.com/blog/how-to-test-saml-and-configure-sso-for-free
• https://www.samltool.com/
• https://mocksaml.com/
• https://github.com/CompassSecurity/SAMLRaider
• https://www.zaproxy.org/docs/desktop/addons/saml-support/
• https://cheatsheetseries.owasp.org/cheatsheets/SAML_Security_Cheat_Sheet.html

Potentially useful general test scheduling, templates and vulnerabilities framework

• https://github.com/projectdiscovery/nuclei