DevToolBox무료
블로그

SAML 디코더 온라인 무료 — SAML 응답 및 요청 디코딩

Base64로 인코딩된 SAML 응답 및 요청을 읽기 쉬운 XML로 디코딩합니다. 무료, 가입 불필요.

About SAML Decoder

SAML (Security Assertion Markup Language) is an XML-based framework for exchanging authentication and authorization data between identity providers and service providers. SAML responses and requests are typically Base64-encoded. This tool decodes SAML tokens and formats the XML for easy reading. It supports both SAML Response (Base64 only) and SAML Request (Base64 + Deflate compression).

𝕏 Twitterin LinkedIn

이 도구 평가

4.6 / 5 · 179 개 평가

더 많은 도구

B64Base64 인코더/디코더JWTJWT 디코더<>XML 포맷터%20URL 인코더/디코더

Recommended

CloudflareFree CDN & DDoS protection

최신 소식 받기

주간 개발 팁과 새 도구 알림을 받으세요.

스팸 없음. 언제든 구독 해지 가능.

Enjoy these free tools?

☕Buy Me a Coffee

How to Use SAML Decoder

  1. Copy the Base64-encoded SAML response or request from your browser, IdP logs, or SP debug output
  2. Paste the encoded SAML data into the input field
  3. The tool automatically detects whether the input is a SAML Response (Base64) or SAML Request (Base64 + Deflate)
  4. View the decoded, pretty-printed XML with highlighted assertion details
  5. Copy the decoded XML for debugging or documentation

Common Use Cases

  • Debugging SSO login failures by inspecting SAML assertions and attributes
  • Verifying identity provider (IdP) configuration during SAML integration setup
  • Inspecting SAML NameID, audience restrictions, and conditions in authentication responses
  • Troubleshooting SAML signature validation errors between IdP and SP
  • Auditing SAML attribute mappings for user provisioning workflows

Frequently Asked Questions

What is a SAML assertion and how do I decode it?
A SAML assertion is an XML document issued by an identity provider (IdP) that contains authentication and authorization statements about a user. Assertions are Base64-encoded for transport. Paste the encoded string into this tool to instantly decode it to readable XML.
How do I decode a SAML response from my browser?
Open your browser's developer tools (F12), go to the Network tab, and look for the POST request to your SP's ACS URL. The SAMLResponse parameter in the form data is the Base64-encoded response. Copy and paste it into this tool.
What is the difference between SAML and OAuth?
SAML is an XML-based protocol primarily used for enterprise SSO between identity providers and service providers. OAuth 2.0 is a JSON-based authorization framework used for API access and third-party app authorization. SAML handles authentication while OAuth focuses on authorization.
Can this tool decode Base64-encoded SAML with Deflate compression?
Yes. SAML Requests typically use Base64 + Deflate compression (as per the HTTP-Redirect binding). This tool automatically detects and handles both plain Base64 and Base64+Deflate encoded SAML data.
Is it safe to paste SAML tokens into this decoder?
Yes, completely safe. All decoding happens locally in your browser. Your SAML data is never sent to any server, stored, or logged. The tool runs entirely client-side.
What information is contained in a SAML response?
A SAML response typically contains: the issuer (IdP), a digital signature, status codes, one or more assertions with the subject (NameID), authentication statements, attribute statements (like email, name, roles), and conditions (audience restriction, validity period).
Why is my SAML response failing to decode?
Common causes include: incomplete copy of the Base64 string, URL-encoded characters that need to be decoded first, or the data is not actually SAML. Make sure you copy the entire SAMLResponse value without truncation.

💬 User Feedback

Have suggestions or found a bug? Leave a message and we'll get back to you.
0/2000