SAML Decoder & Verifier

Decode, inspect and verify Security Assertion Markup Language messages.

Runs locally in your browser

SAML tokens are credentials that can grant access to resources — be careful where you paste them. Everything here is decoded and verified locally in your browser; nothing is uploaded or stored.

SAML token

Paste a SAML Request/Response, raw XML, or a URL with an embedded SAML parameter.

>_SAML message

SAML info — type, status, assertion, conditions, signature and certificate — appears here once a message is decoded.

Decoded

Paste a SAML message to see the decoded XML.