Home Supported Standards Terms & Conditions Privacy Policy Documentation Contact About

← Return to WS-Federation Test Tools

The wresult returned by the IdP after a WS-Federation passive sign-in. When a backend is available it is captured automatically by the API landing endpoint; otherwise paste it below. wresult is a WS-Trust RequestSecurityTokenResponse carrying a SAML (1.1 or 2.0) assertion. The Issued Token pane extracts the assertion from wst:RequestedSecurityToken, decodes it, and lets you validate its signature and decrypt an encrypted token.

Load wresult manually

Static / offline use: paste the raw wresult XML the IdP POSTed (from the browser's network trace or the RP's form), then click Load wresult. It is treated as raw XML — do not base64-decode it.

Response
 
Issued Token
 
Decrypt (EncryptedAssertion / EncryptedData)

If the IdP encrypted the token to the RP (a <EncryptedAssertion> / <xenc:EncryptedData>), decrypt it in the browser with the RP private key. Prefilled from the key generated on the WS-Federation Test Tools page. The data/key-transport algorithms are read from the token's EncryptionMethod.

Tools

Standalone utilities for working with WS-Federation, WS-Trust, and their XML security layers.

WS-Trust Test Tools — request a security token from an STS over WS-Trust and inspect the RequestSecurityTokenResponse.
SAML Request Decoder — take an AuthnRequest off the wire and read it: paste a redirect URL, a POST form body, a bare SAMLRequest, an artifact or the XML, and get the pretty-printed message, its important values, an optional signature check (enveloped for POST, query-string for Redirect) and optional decryption.
SAML Response Decoder — take a SAML response off the wire and read it, in SAML 2.0 or SAML 1.1: paste a POST form body, a redirect URL, a bare SAMLResponse, an artifact, a bare <saml:Assertion> or the XML, and get the status, every assertion and its attributes, a check of every signature it carries (message, assertion and query-string, reported separately) and optional decryption.
SAML Assertion Tool — compose a spec-compliant SAML 1.0/1.1/2.0 assertion (optional elements, NameID, custom attributes), sign it with XML Signature, and encrypt it with XML Encryption.
Certificate Details — parse an X.509 certificate (PEM or bare base64 DER) and inspect its subject, issuer, validity, key, extensions, and fingerprints.
Certificate Authority & X.509 Tools — build a Root, Intermediate and Issuing certificate authority, issue TLS server/client, code-signing, S/MIME and other certificates with every X.509v3 extension, and test a real TLS or mutual-TLS handshake with what you issued.
Operations History

The same log kept on the WS-Federation Test Tools page — every attempted call to the IdP, newest first. This page is where a dispatched call is closed out: when a wresult is rendered above, its pending Sent entry becomes Success (a token came back, or the sign-out completed) or Failure.

Home Supported Standards Terms & Conditions Privacy Policy Documentation Contact About
Supported by Iya CyberSecurity Solutions, LLC
© 2017–2026 IDPTools. All rights reserved.
v0.9.20260915205412