SAML Response Decoder

Decode Base64 SAMLResponse data and turn dense assertion XML into readable issuer, subject, session, audience, attribute, and signature details.

100% client-side - SAML data is decoded and parsed in your browser. Signature presence is shown, not cryptographically verified.

Detail-first View

The main output removes XML noise and presents the response as readable SAML fields.

Attribute Focused

NameID, attributes, audiences, session times, recipients, and status values are pulled into structured tables.

XML When Needed

Pretty XML remains available as a secondary view for support tickets and protocol debugging.

SAML Response Decoder Guide

What to paste

Paste a raw Base64 SAMLResponse value, a form body containing SAMLResponse=, a redirect URL containing the parameter, or raw SAML XML.

What the details view extracts

The decoder reads the response issuer, status, destination, assertion ID, NameID, subject confirmation, validity windows, audiences, authentication context, attributes, signatures, and encrypted assertion markers.

Signature warning

This tool detects signature elements and algorithms, but it does not validate trust, certificate chains, digest values, or XML signature integrity.

Privacy

All parsing runs in the browser. SAML responses can contain user identifiers and attributes, so treat decoded output as sensitive.