How does this tool decode SAML responses?

It decodes the Base64 input string (handling URL encoding and XML formatting), parses the XML DOM tree using DOMParser, and extracts key assertion nodes including Subject, Issuer, Conditions, and AttributeStatements.

Is my SAML token or credentials transmitted anywhere?

No. The entire decoding and XML parsing is performed locally within your browser. No authentication tokens or user identities leave your computer.

SAML 2.0 Response & Assertion Decoder

Decode Base64 SAML 2.0 AuthN responses, inspect NameID identities, verify validity timestamps (NotBefore / NotOnOrAfter), and explore user attribute statements with 100% offline privacy.

BASE64 SAML RESPONSE INPUT 0 chars

DECODED XML ASSERTION & ATTRIBUTES

Frequently Asked Questions

What are NotBefore and NotOnOrAfter conditions?

SAML assertions define a strict time validity window. NotBefore states the earliest UTC timestamp when the assertion is valid, and NotOnOrAfter specifies expiration (typically 5 minutes after issuance).

Can this tool decode encrypted SAML assertions?

If an Identity Provider encrypts the assertion using <EncryptedAssertion>, the content is encrypted with your Service Provider's private RSA key and cannot be decrypted without that private key.