DE EN IT

~/tools / saml-response-decoder

SAML response decoder

Paste the SAMLResponse from the browser's network log — see issuer, time window, user ID, attributes and typical errors. Nothing is sent.

daniele@mikweb: ~/tools — less saml-response-decoder.md

How to find the SAMLResponse

  1. Open the developer tools (F12), tab “Network”, enable “Preserve log”.
  2. Sign in; find the POST to the application's ACS URL (for Nextcloud /apps/user_saml/saml/acs).
  3. Copy the SAMLResponse value from the form data and paste it here.

Typical errors

  • Time window: NotBefore/NotOnOrAfter do not fit the server clock — check NTP.
  • Audience does not match the application's entity ID.
  • The attribute for the user ID is missing or named differently than configured in the application.
  • Status is not Success: the error is at the identity provider.

Privacy

Runs entirely in your browser; nothing is sent or stored.

daniele@mikweb: ~/blog — ls

Related articles

Nextcloud with SAML and OIDC: 8 errors that keep showing up in supportRedirect loop, clock skew, wrong UID, duplicate accounts, missing groups: 8 SAML/OIDC errors from Nextcloud support — each with the cause and the fix.
daniele@mikweb: ~/tools — ls

Tools

SPF checkerCounts the DNS lookups of your SPF record (limit: 10).DNS TTL plannerPlans the TTL reduction and the move time.Cron explainerExplains cron expressions and shows the next runs.DMARC generatorBuilds a valid DMARC record to copy.Mail DNS checkChecks MX, reverse DNS, SPF, DMARC and MTA-STS of a domain.Certificate checkExpiry, chain and names of a TLS certificate.Security headersGrades HSTS, CSP and other security headers.JWT decoderShows header, claims and expiry of a JWT — in your browser only.

← Tools