🔐SAML Response Inspector
Debug SSO integrations securely. Paste a raw, Base64-encoded SAMLResponse token to instantly decode the XML, extract user attributes, and identify authentication failures.
Troubleshooting Single Sign-On (SSO)
Security Assertion Markup Language (SAML 2.0) is the backbone of enterprise Single Sign-On. However, debugging authentication flows between a Service Provider (SP) and an Identity Provider (IdP) like Okta, Azure AD, or PingIdentity can be challenging without visibility into the raw tokens.
Privacy-First Architecture: SAML tokens often contain highly sensitive Personal Identifiable Information (PII) such as emails, employee IDs, and group memberships. This inspector decodes and parses the XML 100% within your local browser using the native DOMParser API. Your assertions are never sent to a backend server.
Common issues this tool helps identify include clock skew (expired NotOnOrAfter timestamps), incorrect NameID formats, missing custom attributes, and encrypted assertions that the Service Provider fails to decrypt.
Key Forensic Capabilities:
- Automatic Base64 and URL decoding of HTTP-POST bindings.
- Real-time expiration validation against your system clock.
- Tabular extraction of all mapped
AttributeNameandAttributeValuepairs. - Clear visibility into IdP error status codes (e.g.,
ResponderorAuthnFailed).