saml response forensic analyzer — free browser tool | fatcousin

drop saml response xml · parse assertions + attributes + signing · detect replay + audience mismatch · runs locally

input

drop saml response xml

raw xml · base64 samlresponse · post body · multiple files

Select file

optional expected audience / sp entity id

parses assertion attributes · nameid · audience · notonorafter · inresponseto · signature keyinfo refs · flags audience mismatch · expired assertion · replay hints · unsigned assertion

limits

signature validity heuristic only — no online cert revocation check · heuristic screener · not definitive proof

status

>ready