Awesome SAML Tracer

SAML tracer with formatted attributes, drag-and-drop import of saml-tracer JSON exports, and a built-in JWT decoder.

Awesome SAML Tracer captures and decodes SAML SSO traffic in real time — no configuration needed. Open the extension, trigger a login, and instantly see every SAMLRequest and SAMLResponse decoded into readable detail. Built as a modern replacement for the original SAML-tracer extension, with a cleaner interface, more useful output, and features designed for developers and support teams alike. ────────────────────────────────────── CORE FEATURES ────────────────────────────────────── ▸ Automatic SAML capture Intercepts SAMLRequest and SAMLResponse messages automatically for both POST binding (form submissions) and Redirect binding (URL-encoded, deflate-compressed). No page reload or proxy required. ▸ Clean attribute display SAML attributes are shown in a clear 3-column table — friendly name, full URN, and value(s) — so you can find what you need at a glance instead of digging through raw XML. ▸ Full decoded detail Each capture shows the message type, issuer, destination, subject, status, conditions (NotBefore / NotOnOrAfter / audience), parameters, and request/response headers — plus collapsible raw XML. ▸ Built-in JWT decoder Switch to the JWT tab and paste any token to see the decoded header, payload, signature, and highlighted claims (issuer, subject, expiry, expired status) — no external tools needed. ▸ Network traffic view See all HTTP requests alongside your SAML captures. SAML requests are highlighted with a blue indicator. Filter to errors only with the Errors view — it activates automatically when 4xx/5xx responses are detected. ────────────────────────────────────── SHARING & EXPORT ────────────────────────────────────── ▸ HTML report Generate a self-contained HTML file with all decoded SAML attributes, headers, and network traffic in a clean, printable format. Saved quietly to your Downloads folder — no browser tab opens. Printable to PDF. ▸ Copy to clipboard Select any capture and click Copy to get a plain-text summary of that entry — ready to paste into a Slack message, email, or support ticket. ▸ Export / Import Export captures as a JSON file compatible with the original SAML-tracer format. Share with a colleague and they can import it directly — no active SSO flow needed for review. ────────────────────────────────────── CUSTOMIZATION ────────────────────────────────────── ▸ Highlight domains Flag requests from specific domains with a gold indicator so your IdP or SP traffic is instantly recognizable in a busy list. ▸ Pin important headers Choose specific header names or SAML parameters to pin in a persistent info bar — with one-click copy for each value. ▸ Query param inspection Automatically surface all query string parameters in the info bar when a URL matches a pattern you define. ▸ URL path extraction Extract and label specific path segments from URLs — useful for surfacing tenant IDs, config IDs, or other context embedded in your endpoints. ────────────────────────────────────── PRIVACY ────────────────────────────────────── All data stays on your device. Nothing is transmitted to any external server. Captures are stored locally and can be cleared at any time. See the full privacy policy for details. ────────────────────────────────────── DEVTOOLS PANEL ────────────────────────────────────── Open Chrome DevTools on any page and click the SAML tab to use the extension filtered to exactly the tab you're inspecting — useful when working across multiple tabs.