# SAML Message Decoder

> This tool helps you debug your SAML based SSO/SLO implementations. It runs in the background, collecting SAML messages as they are sent and received by the browser.

Canonical page: [https://chrome-stats.com/d/saml-message-decoder-extension](https://chrome-stats.com/d/saml-message-decoder-extension)

## Overview

- **ID:** `saml-message-decoder-extension`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** Magnus Suther
- **Category:** web-development,privacy-security
- **Daily users:** 907
- **Weekly downloads:** 10
- **Rating:** 3.38 / 5 (13 ratings)
- **Version:** 2.1.2resigned1
- **Last updated:** 2024-04-25
- **First published:** 2017-08-07
- **Size:** 463 KB
- **Data as of:** 2026-09-12
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/saml-message-decoder-extension/)
- **Website:** [https://github.com/magnussuther/saml-message-decoder-extension](https://github.com/magnussuther/saml-message-decoder-extension)

## Description

SAML Message Decoder is a Chrome extension designed to assist developers and IT professionals in debugging SAML-based Single Sign-On (SSO) and Single Logout (SLO) implementations. It operates silently in the background, capturing all SAML messages sent and received by your browser.

When an SSO or SLO process doesn't behave as expected, you can simply open the extension to view the latest SAML messages displayed in human-readable XML format. This clear and accessible view of authentication messages allows you to quickly diagnose and resolve complex authorization issues encountered during the SAML authentication process, improving your implementation workflow and reducing downtime.

## Rankings

- #3,521 — Overall
- #2 — message
- #2 — messages
- #18 — receive
- #38 — usage
- #47 — qr code

## Permissions and access

### Permissions

- `<all_urls>`
- `webRequest`
- `contextMenus`
- `storage`
- `downloads`

## Safety

- **Risk impact:** High risk impact
- **Risk likelihood:** Low risk likelihood

### Analysis details

- Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Review summary

The SAML Message Decoder add-on is praised for its utility in handling complex SAML configurations and has improved functionality in recent Firefox versions. However, multiple users report that it does not work in private browsing mode, fails to capture SAML messages reliably, and sometimes shows blank dialog boxes. Issues with Firefox containers and lack of updates by the developer further impact usability, making it less dependable for thorough SAML testing.

### Pros

- Works well for problematic SAML configurations.
- Updated versions function correctly in Firefox Quantum.
- Helpful and essential tool for job-related SAML testing and debugging.

### Cons

- Does not work in private browsing mode where users often need it.
- Fails to capture SAML messages consistently across multiple service providers.
- Some users experience blank dialog boxes and inability to view SAML tokens.
- Incompatibility issues with Firefox containers.
- Lack of timely fixes or responses from the author for reported problems.

## Similar extensions and apps

- [SAML-tracer](https://chrome-stats.com/d/saml-tracer) — 21,196 users, 4.25 / 5
- [XML SAML Certificate Decoder](https://chrome-stats.com/d/xml-saml-certificate-decoder) — 7 users
- [SSO Tracer: SAML & OIDC Debugger](https://chrome-stats.com/d/sso-tracer-saml-oidc-debugger) — 107 users
- [SAMLView](https://chrome-stats.com/d/samlview) — 5 users
- [AuthLens — SSO Troubleshooter](https://chrome-stats.com/d/authlens-sso-troubleshooter) — 1 users
- [SAML Pen Test - Lite](https://chrome-stats.com/d/saml-pen-test-lite) — 13 users, 5.00 / 5
- [AWS SAML Sign-In Beautifier](https://chrome-stats.com/d/aws-saml-sign-in-beautifier) — 4 users, 5.00 / 5
- [Sweet Decoder](https://chrome-stats.com/d/sweet-decoder)
- [SOC Multi-tool](https://chrome-stats.com/d/soc-multi-tool) — 87 users
- [Web3 Decode Extension](https://chrome-stats.com/d/web3-decode-extension) — 1 users
- [Universal Adobe Debugger](https://chrome-stats.com/d/universal-adobe-debugger) — 42 users
- [Svelte Reactive Debugger](https://chrome-stats.com/d/svelte-reactive-debugger) — 41 users, 5.00 / 5

---

Source: [Chrome-Stats](https://chrome-stats.com/d/saml-message-decoder-extension)