Tool Help

What this SAML tool does
Decode SAML messages in two common patterns:
- HTTP POST: Base64-encoded SAMLResponse or Assertion.
- HTTP Redirect: URL-encoded, Base64, DEFLATE-compressed SAMLRequest.
Why it matters in healthcare
- SSO for patient portals and provider portals.
- Federated identity across health systems, HIEs, and payers.
- IdP → portal → API gateway chains where SAML establishes identity and a downstream token (JWT/OAuth) carries context to FHIR and HL7 APIs.
All decoding happens in your browser. Avoid pasting live production SAML from real patients or staff into public tools. Prefer non-production or obfuscated samples.

