OAuth2 & OpenID Connect Debugger

Standalone utilities for working with SAML and its XML security layers.

SAML Request Decoder — take an AuthnRequest off the wire and read it: paste a redirect URL, a POST form body, a bare SAMLRequest, an artifact or the XML, and get the pretty-printed message, its important values, an optional signature check (enveloped for POST, query-string for Redirect) and optional decryption.

SAML Response Decoder — take a SAML response off the wire and read it, in SAML 2.0 or SAML 1.1: paste a POST form body, a redirect URL, a bare SAMLResponse, an artifact, a bare <saml:Assertion> or the XML, and get the status, every assertion and its attributes, a check of every signature it carries (message, assertion and query-string, reported separately) and optional decryption.

SAML Assertion Tool — compose a spec-compliant SAML 1.0/1.1/2.0 assertion (optional elements, NameID, custom attributes), sign it with XML Signature, and encrypt it with XML Encryption.

Certificate Details — parse an X.509 certificate (PEM or bare base64 DER) and inspect its subject, issuer, validity, key, extensions, and fingerprints.

Certificate Authority & X.509 Tools — build a Root, Intermediate and Issuing certificate authority, issue TLS server/client, code-signing, S/MIME and other certificates with every X.509v3 extension, and test a real TLS or mutual-TLS handshake with what you issued.