SAML Decoder & Verifier

Decode, inspect and verify Security Assertion Markup Language messages.

Runs locally in your browser

SAML tokens are credentials that can grant access to resources, so be careful where you paste them. Everything here is decoded and verified locally in your browser; nothing is uploaded or stored.

SAML token

Paste a SAML Request/Response, raw XML, or a URL with an embedded SAML parameter.

>_SAML message

SAML info: type, status, assertion, conditions, signature and certificate, appears here once a message is decoded.

Decoded

Paste a SAML message to see the decoded XML.