OAuth2 & OpenID Connect Debugger — WS-Federation Response

Home Terms & Conditions Privacy Policy Documentation Contact About

The wresult returned by the IdP after a WS-Federation passive sign-in. When a backend is available it is captured automatically by the API landing endpoint; otherwise paste it below. wresult is a WS-Trust RequestSecurityTokenResponse carrying a SAML (1.1 or 2.0) assertion. The Issued Token pane extracts the assertion from wst:RequestedSecurityToken, decodes it, and lets you validate its signature and decrypt an encrypted token.

Load wresult manually

Static / offline use: paste the raw wresult XML the IdP POSTed (from the browser's network trace or the RP's form), then click Load wresult. It is treated as raw XML — do not base64-decode it.

wresult (RSTR XML)

Context (wctx, optional)

Response

wresult (RSTR)

Issued Token

Extracted Token

Decrypt (EncryptedAssertion / EncryptedData)

If the IdP encrypted the token to the RP (a <EncryptedAssertion> / <xenc:EncryptedData>), decrypt it in the browser with the RP private key. Prefilled from the key generated on the WS-Federation Test Tools page. The data/key-transport algorithms are read from the token's EncryptionMethod.

Decryption Key

IDPTools

Home Terms & Conditions Privacy Policy Documentation Contact About