# SAML-tracer

> A tool for viewing SAML and WS-Federation messages sent through the browser during single sign-on and single logout.

Canonical page: [https://chrome-stats.com/d/saml-tracer](https://chrome-stats.com/d/saml-tracer)

## Overview

- **ID:** `saml-tracer`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** Jan Köhler
- **Category:** web-development,privacy-security,other
- **Daily users:** 21,196
- **Weekly downloads:** 370
- **Rating:** 4.25 / 5 (53 ratings)
- **Version:** 1.9.5
- **Last updated:** 2026-08-06
- **First published:** 2011-06-20
- **Size:** 130 KB
- **Data as of:** 2026-09-12
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/saml-tracer/)
- **Privacy policy:** [https://addons.mozilla.org/firefox/addon/saml-tracer/privacy/](https://addons.mozilla.org/firefox/addon/saml-tracer/privacy/)

## Description

SAML-tracer is a powerful Chrome extension designed for developers and IT professionals to monitor and analyze SAML and WS-Federation messages exchanged in the browser. It facilitates debugging and troubleshooting during single sign-on (SSO) and single logout (SLO) by capturing SAML tokens and federation messages in real time. With a user-friendly interface, SAML-tracer helps ensure secure and seamless authentication workflows by making it easy to inspect the security assertions and federation tokens exchanged between identity providers and service providers.

This tool is essential for anyone working with federated identity protocols, providing detailed insights into the messages flowing through the browser during authentication events. Its integration within Chrome makes it readily accessible without the need for external network monitoring tools, enhancing productivity and security.

## Rankings

- #505 — Overall
- #39 — Web Development
- #64 — Other extensions
- #123 — Privacy & Security
- #19 — travel
- #55 — messages

## Permissions and access

### Permissions

- `webRequest`

### Host permissions

- `<all_urls>`

## Safety

- **Risk impact:** Moderate risk impact
- **Risk likelihood:** Moderate risk likelihood

### Analysis details

- Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
- This extension was updated in the past 3 months. New updates may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Review summary

SAML-tracer is praised as an essential, user-friendly Firefox add-on that provides detailed, color-coded tracing of SAML and WS-Federation authentication flows. It facilitates troubleshooting and exporting traces for support, making it invaluable for IAM consultants and security professionals. Despite its functionality and reliability even where other tools fail, users report that it no longer works in private browsing windows and some experience problems downloading or installing it from the website.

### Pros

- Very useful for tracing SAML and WS-Federation authentication flows with detailed insight.
- Color coding and exporting features help in diagnosing issues efficiently.
- Easy to use and integrates well with Firefox for quick debugging.
- Essential tool for IAM professionals and those dealing with SAML integrations.
- Works reliably where other tools like BURP may interfere.

### Cons

- No longer works properly in private browsing mode, causing inconvenience for some users.
- Some difficulty or issues reported related to downloading or installing the add-on from the website.

## Similar extensions and apps

- [SAML Message Decoder](https://chrome-stats.com/d/saml-message-decoder-extension) — 907 users, 3.38 / 5
- [SSO Tracer: SAML & OIDC Debugger](https://chrome-stats.com/d/sso-tracer-saml-oidc-debugger) — 107 users
- [SAMLView](https://chrome-stats.com/d/samlview) — 5 users
- [SAML Pen Test - Lite](https://chrome-stats.com/d/saml-pen-test-lite) — 13 users, 5.00 / 5
- [JWT Tracker Extension](https://chrome-stats.com/d/jwt-tracker-extension) — 28 users
- [XML SAML Certificate Decoder](https://chrome-stats.com/d/xml-saml-certificate-decoder) — 7 users
- [AuthLens — SSO Troubleshooter](https://chrome-stats.com/d/authlens-sso-troubleshooter) — 1 users
- [AWS SAML Sign-In Beautifier](https://chrome-stats.com/d/aws-saml-sign-in-beautifier) — 4 users, 5.00 / 5
- [TrackScan](https://chrome-stats.com/d/trackscan)
- [Tracy](https://chrome-stats.com/d/tracyplugin) — 5 users, 5.00 / 5
- [SAML to AWS STS Keys](https://chrome-stats.com/d/saml-to-aws-sts-keys) — 239 users, 5.00 / 5
- [SWIF Shadow IT Discovery](https://chrome-stats.com/d/swif-access-discovery) — 6 users

---

Source: [Chrome-Stats](https://chrome-stats.com/d/saml-tracer)