Viewing a Security Assertion Markup Language (SAML) response in a web browser is a critical step when troubleshooting SAML 2.0-related issues. Extract the SAML response directly from the developer console or network tools of Google Chrome, Mozilla Firefox, Apple Safari, or Microsoft Internet Explorer to analyze the encoded request.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Security Assertion Markup Language (SAML) Response
• Web Browsers
• Single Sign-On (SSO)

NOTE: The SAML response is always on the Assertion Consumer Service (ACS) URL; therefore the SAML post will always be on the ACS URL.

What are the steps to view a SAML response in Google Chrome?

Open the developer console, enable the preserve log feature, reproduce the issue, and locate the encoded request within the network headers.

1. Press F12 to start the developer console.
2. Select the Network tab, and then select Preserve log.
3. Reproduce the issue.
4. Look for a SAML Post in the developer console pane.
5. Select that row, and then view the Headers tab at the bottom.
6. Look for the SAMLResponse attribute that contains the encoded request.

What are the steps to view a SAML response in Mozilla Firefox?

Open the developer console, persist the network logs, reproduce the issue, and locate the encoded request within the form data parameters.

1. Press F12 to start the developer console.
2. In the upper right of the developer tools window, click the options gear icon.
3. Click Persist logs.
4. Select the Network tab.
5. Reproduce the issue.
6. Look for a POST SAML in the table.
7. Select that row.
8. In the Form Data window on the right, select the Params tab and find the SAMLResponse element.

What are the steps to view a SAML response in Apple Safari?

Enable the web inspector in the browser settings, open the resources tab, reproduce the issue, and locate the encoded request data.

1. Enable Web Inspector in Safari by navigating to Settings.
2. Click Privacy.
3. Click Advanced Settings then select Show features for web developers.
4. Open the Web Inspector by clicking Develop, then select Show Web Inspector.
5. Select the Network tab, and then select Preserve log.
6. Reproduce the issue.
7. Look for a SAML Post in the developer console pane.
8. Select that row, and then view the Headers tab at the bottom.
9. Look for the SAMLResponse attribute that contains the encoded request.

What are the steps to view a SAML response in Microsoft Internet Explorer?

Use a third-party web debugging proxy tool to capture and analyze the network traffic during a passive sign-in.

1. Follow the steps in the article AD FS 2.0: How to Use Fiddler Web Debugger to Analyze a WS-Federation Passive Sign-In to download and install Fiddler and capture the data.

NOTE: Fiddler is provided as an example only; use a web debugging proxy tool that best fits the organization's guidelines.