Skip to content

Back to the catalog

Protocol Soup
protocolsoup.comtool

Protocol Soup

ProtocolSoup is an interactive platform for executing real identity protocol flows (OAuth 2.0, OIDC, SAML, SCIM, SPIFFE, CAEP/RISC security event sharing, OID4VCI/OID4VP verifiable credentials, WebAuthn/FIDO2) against live authorization servers, issuers, and verifiers. It provides a 'Looking Glass' to inspect every HTTP request/response and decode live artifacts like JWTs, SAML assertions, and SETs, plus a wallet harness for issuing/presenting mdoc and SD-JWT credentials with HAIP attestation. Useful for security practitioners learning or testing identity protocol internals hands-on rather than in the abstract.

TL;DR Interactive lab for running and inspecting real OAuth/OIDC/SAML/SCIM/WebAuthn/verifiable-credential protocol flows with live JWT/SAML/SET decoding.
Open original ↗

Technologies named here

Techniques named here

  • Authorization framework for delegated access
  • Authentication layer built on OAuth 2.0
  • XML-based federated identity and SSO
  • Cross-domain identity provisioning
  • Zero-trust workload identity
  • CAEP and RISC security event sharing
  • Verifiable credential issuance over OpenID
  • Verifiable presentation requests and verification
  • HAIP attestation for mdoc and SD-JWT credential wallets

Related in Identity & Access