SAML Decoder Online Free — Decode SAML Response & Request

Decode Base64-encoded SAML responses and requests to readable XML. Debug SSO authentication tokens with our free online SAML decoder tool.

Encoded SAML

Decoded XML

About SAML Decoder

SAML (Security Assertion Markup Language) is an XML-based framework for exchanging authentication and authorization data between identity providers and service providers. SAML responses and requests are typically Base64-encoded. This tool decodes SAML tokens and formats the XML for easy reading. It supports both SAML Response (Base64 only) and SAML Request (Base64 + Deflate compression).

𝕏 Twitter in LinkedIn

💬 User Feedback

Rate this tool

4.6 / 5 · 179 ratings

More Tools

B64Base64 Encoder/Decoder JWTJWT Decoder <>XML Formatter %20URL Encoder/Decoder

Stay Updated

Get weekly dev tips and new tool announcements.

No spam. Unsubscribe anytime.

Enjoy these free tools?

☕Buy Me a Coffee

How to Use SAML Decoder

Copy the Base64-encoded SAML response or request from your browser, IdP logs, or SP debug output
Paste the encoded SAML data into the input field
The tool automatically detects whether the input is a SAML Response (Base64) or SAML Request (Base64 + Deflate)
View the decoded, pretty-printed XML with highlighted assertion details
Copy the decoded XML for debugging or documentation

Common Use Cases

Debugging SSO login failures by inspecting SAML assertions and attributes
Verifying identity provider (IdP) configuration during SAML integration setup
Inspecting SAML NameID, audience restrictions, and conditions in authentication responses
Troubleshooting SAML signature validation errors between IdP and SP
Auditing SAML attribute mappings for user provisioning workflows

Frequently Asked Questions

What is a SAML assertion and how do I decode it?

A SAML assertion is an XML document issued by an identity provider (IdP) that contains authentication and authorization statements about a user. Assertions are Base64-encoded for transport. Paste the encoded string into this tool to instantly decode it to readable XML.

How do I decode a SAML response from my browser?

Open your browser's developer tools (F12), go to the Network tab, and look for the POST request to your SP's ACS URL. The SAMLResponse parameter in the form data is the Base64-encoded response. Copy and paste it into this tool.

What is the difference between SAML and OAuth?

SAML is an XML-based protocol primarily used for enterprise SSO between identity providers and service providers. OAuth 2.0 is a JSON-based authorization framework used for API access and third-party app authorization. SAML handles authentication while OAuth focuses on authorization.

Can this tool decode Base64-encoded SAML with Deflate compression?

Yes. SAML Requests typically use Base64 + Deflate compression (as per the HTTP-Redirect binding). This tool automatically detects and handles both plain Base64 and Base64+Deflate encoded SAML data.

Is it safe to paste SAML tokens into this decoder?

Yes, completely safe. All decoding happens locally in your browser. Your SAML data is never sent to any server, stored, or logged. The tool runs entirely client-side.

What information is contained in a SAML response?

A SAML response typically contains: the issuer (IdP), a digital signature, status codes, one or more assertions with the subject (NameID), authentication statements, attribute statements (like email, name, roles), and conditions (audience restriction, validity period).

Why is my SAML response failing to decode?

Common causes include: incomplete copy of the Base64 string, URL-encoded characters that need to be decoded first, or the data is not actually SAML. Make sure you copy the entire SAMLResponse value without truncation.