No account

SAML decoder

Paste a SAMLRequest or a SAMLResponse (base64, compressed or not, or the full URL), raw XML or a JWT token. Decoding happens in your browser: nothing is sent to ID-Kit. To verify a response (signature, audience, validity…), use the analyser instead.

The message to decode

Paste a SAML message as you saw it go by: the value of SAMLRequest or SAMLResponse (base64, compressed or not), the full redirect URL, raw XML or a JWT token. Decoding happens in your browser: nothing is sent to ID-Kit.