Skip to content

Decode a deflated SAML response

Decode Base64, inflate the raw DEFLATE stream, and format the XML.

Install in Serialize

What it can do

  • Decode a Base64 transport wrapper
  • Inflate raw DEFLATE data
  • Indent the recovered SAML XML

How the recipe works

From Base64

Recover the compressed bytes.

Raw Inflate

Inflate the HTTP-Redirect binding payload.

XML Beautify

Make nested XML elements readable.

Demonstration

Sample input

fc5BCoMwFATQq0gOYEqXnxgodCO0G3uCoB8aSPI/mQgev7QudNXlDMxjHEJOShNDpYC7LacC+pWDWWshCYigEjKD2kyv2/NB1/5CWqXJLMl0430wC2cx3n13NAIr15P0HwoA1xalGP9uTUHWxkV73kLWxM6eTL+n467/AA==

Expected result

https://idp.example

When to use it

  • SSO debugging
  • Identity-provider integration
  • Learning the SAML message structure

Adapt it

Some SAML values are Base64-encoded XML without DEFLATE. Disable Raw Inflate when the first decoded bytes already begin with XML.

Source and verification

Adapted from kraven-security CyberChef recipes. The explanation and sample are written for Serialize, use synthetic or documentation-safe data, and are checked against the current operation catalogue. The workflow runs locally without an external API call.

Navigation

Type to search…

↑↓ navigate↵ selectEsc close