OneWelcome tooling
OW Toolbox
A small constellation of utilities for working with OneWelcome — generators, validators, demo helpers, and the odd developer tool.
Tools
Identity Lab
Hands-on OAuth/OIDC playground for OneWelcome tenants. Sign in to save your environments, flows, configuration, and token results across sessions.
IO Marketplace
Discover, request, and share reusable IO flows and nodes. Includes a designer playground, request board, and community forum.
IO Inspector
Chrome extension that intercepts Identity Orchestration workflow requests for real-time analysis. Includes 12+ validation rules, Marketplace browsing in the side panel, and one-click JSON copy.
Kube Logger
Stream Kubernetes logs from your EKS clusters into a browser viewer with filtering, flow tracing, and per-namespace color coding. Thales-internal — requires AWS SSO access.
IO Flow Migrate
Diff two IO tenants side-by-side and migrate flows between them. Read-only by default, dry-run gated, tokens live only in your browser tab.
VIOC Promotion
Promote IO flows onto VIO Runner environments: pick a flow from the design API, compile it on a runner, review the staged version, then activate with an explicit gate. Runtime versions, mappings, and errors at a glance.
OneWelcome API Explorer
Interactive reference for the OneWelcome admin APIs (Identity Store, Password Store, TOTP, Recovery Codes, FIDO). Read-only by default; flip auth to try calls against a tenant.
JS String Escaper
Live bidirectional converter between readable JS/JSON and its JSON-escaped string form, with syntax highlighting and linting.
FIDO / Passkey Workbench
Inspect and edit FIDO2 policies, list enrolled authenticators, and pull WebAuthn attestation/assertion challenges step-by-step — guided wrapper over the OneWelcome FIDO Access API.