Portable system for testing SAML 2 systems

[Cantor, Scott]

It's also not really clear what any given IdP would buy you in debugging some other IdP. The SP logs are good enough for that unless you don't know the standard, and in that case, there is no magic bullet to fix that.

What an IdP on hand (or possibly samltest) will do is let you test SP behavior or changes to your system independently, which is essential, but nothing to do with debugging what Azure will serve up. That's more a logging/tracing problem, i.e. nothing new needed or SAML Tracer to just save some log review *if* you actually have access to an account on the IdP, which often you cannot assume.

-- Scott