Security Assertion Markup Language
samltool.io allows you to decode, inspect and verify SAML messages.
Security Assertion Markup Language (SAML) is an XML-based open standard data format for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider.
SAML tokens are credentials, which can grant access to resources. Be careful where you paste them! You can safely paste SAML messages here. We do not record tokens or send them anywhere, all validation and debugging is done on the browser.
Paste your SAML token below. You can paste requests, responses, raw XML, URLs with embedded requests, or even set https://samltool.io as the ACS URL in your IdP.