Sammy

SAML decoder · runs entirely in your browser

Input

Capture a live SAML POST

Use this address as the ACS URL (or any SAML endpoint) in your IdP or SP. HTTP-POST submissions are caught by a service worker in this browser; HTTP-Redirect messages work via the query string.

/acs

● Starting service worker… On hosts without the Cloudflare edge worker, open this page once in the receiving browser first.

Decode a SAML message

Paste a message on the left, load a sample, or point a SAML POST at this page. Nothing you paste is uploaded — decoding, inflating and parsing all happen locally.