Functional Test OpenID Connect OP

We offer three Relying Parties (that is: Service Providers supporting OIDC) for test pruposes.

Each Relying Party displays the transmitted claims (attributes) and claim values upon successful login.
At the Discovery Service you have to enter the Issuer ID of your OpenID Provider (OP, your IdP). Note that our test RPs only support Issuer IDs without any further request URI behind the domain. (Issuer IDs named like a typical Shibboleth IdP Entity ID, ending with '/idp/shibboleth', do not work!)

Relying Party Client ID	Requested Sub Claim	Requested Scopes	Authorization
testsp-oidc.aai.dfn.de	subject-pairwise	openid	valid-user
testsp2-oidc.aai.dfn.de	subject-public	openid profile	valid-user
testsp3-oidc.aai.dfn.de	subject-public	openid email	valid-user

Functional Test OpenID Connect RP

An OIDC Relying Party (that is: an SP) can be tested with our OP (a Shibboleth IdP with the OIDC plugin): https://testidp-oidc.aai.dfn.de

Issuer ID	Default Sub Claim	Supported Scopes	Test Accounts
https://testidp-oidc.aai.dfn.de	subject-pairwise	openid profile email	see login page