SAML Decoder

Decode and inspect SAML 2.0 Responses, Assertions, and AuthnRequests — paste raw XML or base64-encoded tokens. Displays issuer, subject, conditions (with expiry check), attributes table, authn context, and signature info.

13pxXML

Paste a SAML assertion on the left and click Decode.

Decode a SAML document to see its XML here.

SAML Decoder

Decode and inspect SAML 2.0 Responses, Assertions, and AuthnRequests — paste raw XML or base64-encoded tokens. Displays issuer, subject, conditions (with expiry check), attributes table, authn context, and signature info.

Common uses

  • Decode a SAML Response from an IdP POST assertion
  • Inspect SAML attributes from a corporate SSO login
  • Check SAML conditions expiry

Also searched as

  • saml decoder online
  • decode saml response
  • base64 decode saml assertion
  • saml debugger
  • decode base64 saml request xml
  • check saml assertion expiry
  • view saml attributes
  • saml xml viewer
  • verify saml signature online
  • generate sample saml response
  • saml metadata viewer
  • saml sso troubleshooting nameid

Frequently asked questions

How do I decode a SAMLResponse?

Paste the base64 value or raw XML into the Decoder tab. It shows the issuer, subject, conditions, attributes, authn context and signature info.

How can I tell if a SAML assertion has expired?

The decoder checks the Conditions validity window and reports whether the assertion is expired.

Can I see the attributes an IdP sent in a SAML login?

Yes. The attributes appear in a table after decoding, which helps when troubleshooting SSO claims.

Can this tool generate a SAML response for testing?

Yes, the Encoder tab builds a sample SAML Response from fields you fill in, with a base64 version for POST binding. There are also Metadata and Reference tabs.

Can it verify the signature on a SAML document?

Yes, the Verify Signature button checks the XML signature against the certificate embedded in the document. That proves the document wasn't altered, but not that the certificate belongs to your real IdP.

Is my data uploaded to a server?

No. This tool runs entirely in your browser — your input is processed locally on your device and is never uploaded or stored on a server.