A computing system comprising: one or more processors; and one or more computer-readable media having thereon computer-executable instructions that are structured such that, when executed by the one or more processors, cause the computing system to perform at least: generate one or more protocol-agnostic identity claim policies (520, 530); and apply at least one of the one or more identity claim policies (520, 530) to one or more applications, each of the one or more applications implementing a particular identity authentication protocol that is one of a plurality of identity authentication protocols; and test at least one of the one or more identity claim policies after applying the at least one identity claim policy to the one or more applications; the applying the at least one identity claim policy (520, 530) comprising: for each of the one or more applications, determining the identity authentication protocol that is implemented by the corresponding application; and based on the determined identity authentication protocol, determining one or more identity claims (200B,300C) of the corresponding application that corresponds to the at least one identity claim policy (520, 530); and the testing the at least one identity claim policy that is applied to a particular application comprising: setting up a test framework into the particular application for generating test requests; and for each of the plurality of protocols: generating a test request for accessing the test application; receiving a security token of the corresponding protocol, the security token including one or more identity claims; decoding the one or more identity claims contained in the security token; and displaying the decoded one or more identity claims. one or more processors; and one or more computer-readable media having thereon computer-executable instructions that are structured such that, when executed by the one or more processors, cause the computing system to perform at least: generate one or more protocol-agnostic identity claim policies (520, 530); and apply at least one of the one or more identity claim policies (520, 530) to one or more applications, each of the one or more applications implementing a particular identity authentication protocol that is one of a plurality of identity authentication protocols; and test at least one of the one or more identity claim policies after applying the at least one identity claim policy to the one or more applications; the applying the at least one identity claim policy (520, 530) comprising: for each of the one or more applications, determining the identity authentication protocol that is implemented by the corresponding application; and based on the determined identity authentication protocol, determining one or more identity claims (200B,300C) of the corresponding application that corresponds to the at least one identity claim policy (520, 530); and the testing the at least one identity claim policy that is applied to a particular application comprising: setting up a test framework into the particular application for generating test requests; and for each of the plurality of protocols: generating a test request for accessing the test application; receiving a security token of the corresponding protocol, the security token including one or more identity claims; decoding the one or more identity claims contained in the security token; and displaying the decoded one or more identity claims. based on the determined identity authentication protocol, determining one or more identity claims (200B,300C) of the corresponding application that corresponds to the at least one identity claim policy (520, 530); and the testing the at least one identity claim policy that is applied to a particular application comprising: setting up a test framework into the particular application for generating test requests; and for each of the plurality of protocols: generating a test request for accessing the test application; receiving a security token of the corresponding protocol, the security token including one or more identity claims; decoding the one or more identity claims contained in the security token; and displaying the decoded one or more identity claims. setting up a test framework into the particular application for generating test requests; and for each of the plurality of protocols: generating a test request for accessing the test application; receiving a security token of the corresponding protocol, the security token including one or more identity claims; decoding the one or more identity claims contained in the security token; and displaying the decoded one or more identity claims. generating a test request for accessing the test application; receiving a security token of the corresponding protocol, the security token including one or more identity claims; decoding the one or more identity claims contained in the security token; and displaying the decoded one or more identity claims.