Pick a federation. Expand for its entities and a one-liner to try.
Each topology lists its entities by role. Clicking an entity opens it in the explorer's Entity Inspector — this works out of the box. Chain, topology, and policy views need a one-time setup first.
- Click the button above — opens explore.oidfed.com/#/settings and previews the 8 demo Trust Anchors.
- Click Add 8 anchors in the preview card. Chain, topology, and policy views work immediately — your other settings stay untouched.
Or download and import manually (older explorer build)
-
Download
oidfed-explorer-settings.json— ships with all 8 Trust Anchors for the demo. - Open explore.oidfed.com/#/settings.
- Click Import Settings, pick the downloaded file. Note: this replaces existing settings; the one-click path above only adds the anchors.
single-anchor 1 Trust Anchor, 1 OP, 2 RPs (one automatic, one explicit).
Entities
Aliases single.fed.oidfed.com and
minimal.fed.oidfed.com both resolve to the TA.
Trust anchors (add to /#/settings)
Try with the CLI
hierarchical TA → 2 Intermediates (edu, health) → leaf OP + RP under each branch.
Entities
Trust anchors (add to /#/settings)
Try with the CLI
multi-anchor 2 Trust Anchors (gov, industry) above a shared Intermediate.
Entities
Trust anchors (add to /#/settings)
Try with the CLI
Both anchors configured? The chain resolves through the shared IA to either TA.
cross-federation Two independent federations bridged by a dual-anchor entity.
Federation X
Federation Y + bridge
Trust anchors (add to /#/settings)
Try with the CLI
Swap the trust anchor to ta-y to see the alternative chain to the
sibling federation.
constrained
TA with max_path_length=0 — direct subordinates resolve, deeper
chains are rejected by design.
Entities
Trust anchors (add to /#/settings)
Try with the CLI
Expected outcome: chain rejected because the TA caps depth at zero intermediates.
policy-operators
IA exercising every metadata policy operator (subset_of,
value, add, essential).
Entities
Trust anchors (add to /#/settings)
Try with the CLI
Two surfaces. Same federation underneath.
The explorer is browser-based and visual; the CLI is a single binary that prints machine-readable trees, tables, and JWTs. Pick whichever matches your task.
explore.oidfed.com
The explorer is a HashRouter app. Open the URL above, paste an entity into the
search box, or jump straight to a feature: /#/entity/<id>,
/#/chain/<id>, /#/topology,
/#/policy, /#/health,
/#/subordinates?entity=<id>, /#/settings. The
entityId is URL-encoded on the path.
Entity inspection works immediately; chain, topology, and policy resolution need at least one Trust Anchor configured first at /#/settings. The accordion in §02 lists the anchor URL(s) for each topology.
@oidfed/cli
Install once, then run any of entity, chain,
resolve, validate, decode,
health, trust-mark-status, fetch,
list, expiry, verify, keygen,
sign. Add --json to pipe into jq.