Service Links

You will find some useful links below for the Authorization Service web portals and developer resources. We also include a QA Environment link for each service. We highly recommend using QA when testing and developing, but production services should always be registered and linked with our production SSO, Portals and APIs.

Web portals

Users portal

• production: https://users-portal.web.cern.ch/
• qa: https://users-portal-qa.web.cern.ch/

Application portal

• production: https://application-portal.web.cern.ch/
• qa: https://application-portal-qa.web.cern.ch/

Groups portal

• production: https://groups-portal.web.cern.ch
• qa: https://groups-portal-qa.web.cern.ch

Resources portal

• production: https://auth-resources.web.cern.ch
• qa: https://auth-resources-qa.web.cern.ch

Yubikey for SSH setup application

• production: https://sshsetup.web.cern.ch

APIs and tools for Service Owners

Keycloak Servers

OIDC well-known configuration URLs:

• production: https://auth.cern.ch/auth/realms/cern/.well-known/openid-configuration
• qa: https://keycloak-qa.cern.ch/auth/realms/cern/.well-known/openid-configuration

SAML descriptor URLs:

• production: https://auth.cern.ch/auth/realms/cern/protocol/saml/descriptor
• qa: https://keycloak-qa.cern.ch/auth/realms/cern/protocol/saml/descriptor

Authorization Service API: Swagger docs

• production: https://authorization-service-api.web.cern.ch
• qa: https://authorization-service-api-qa.web.cern.ch

Test Clients

OIDC Token Viewer

• production: https://oidc-token-viewer.cern.ch/
• qa: https://oidc-token-viewer-qa.cern.ch/

SAML Token Viewer

• production: https://saml-token-viewer.app.cern.ch/
• qa: https://saml-token-viewer-qa.app.cern.ch/