SSO Tracer: SAML & OIDC Debugger by Radu

SSO Tracer: SAML & OIDC Debugger helps troubleshoot Single Sign-On issues by capturing and decoding authentication traffic in the current tab.

What it does

Detects and decodes SAML (SAMLRequest / SAMLResponse) and OIDC/OAuth (authorize/callback errors)

Groups traffic into distinct SSO attempts and shows a per-attempt summary

Highlights common failure causes (redirect URI mismatch, consent/MFA requirements, audience/issuer mismatch, time skew, cookie/session issues, redirect loops)

Generates a shareable support snippet (text or Markdown) with redaction enabled by default

Includes configurable IdP profiles (Entra/Azure AD, Okta, Keycloak, ADFS, Ping, OneLogin) and allows adding custom domains/paths

Privacy & safety

Designed for troubleshooting: no analytics/telemetry

Sensitive fields (cookies, tokens, SAML payloads) are masked by default in the UI and in support snippets

Note

Requires broad host access to observe authentication redirects across IdP and service provider domains.