About this utility
How to use SAML Response & Assertion Decoder
Decode POST or Redirect-binding SAML XML and summarize issuers, subjects, conditions, audiences, status, signatures, and attributes.
What to provide
Paste raw XML, URL-encoded Base64 SAMLResponse/SAMLRequest, or a Base64 assertion. DTDs and entities are rejected.
- Paste, type, or drag and drop a supported text file into the input area.
- Choose the options that match your intended result.
- Select “Run tool” or press Ctrl/Command + Enter, then copy, download, or move the result back into the first input for another pass.
What the result means
A safe structured SAML summary and attribute table.
Privacy and safety
This utility is loaded as browser code and processes your input only in this tab. OmniCastConverter has no upload endpoint and never stores your content, filenames, tokens, or secrets. Generated markup and code are shown as inert text and are never executed.
Limitations
- Everything is processed in this browser tab. Input, filenames, keys, and output are never uploaded or saved. Decoding never implies signature validity, issuer trust, decryption, replay safety, audience validity, or authorization.
Try the included example
Select “Load example” at any time to restore this tested sample.
<saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_local" Version="2.0" IssueInstant="2026-07-24T12:00:00Z"><saml:Issuer>https://idp.example.test</saml:Issuer><saml:Subject><saml:NameID>ada@example.test</saml:NameID></saml:Subject></saml:Assertion>