ClavionX SAML Debugger 作者： ClavionX
A SAML Diagnostic Assistant: capture SAML fClavionX SAML Debugger captures SAML SSO/SLO traffic locally and produces a deterministic, explainable root-cause analysis of login/llows locally and get an explainable root-cause analysis, not just a trace.
尚无用户尚无用户
扩展元数据
屏幕截图
关于此扩展
ClavionX SAML Debugger is a SAML Diagnostic Assistant, not a trace viewer.
Most SAML tools give you a raw XML dump and leave you to figure out what went wrong. ClavionX watches your SAML SSO and SLO traffic locally in the browser, correlates the AuthnRequest, Response, and logout messages into a single flow, and runs that flow through a deterministic knowledge base of real-world SAML failure modes — clock skew, signature/algorithm mismatches, missing or malformed assertions, RelayState and InResponseTo mismatches, session/cookie issues, and more — to tell you what broke and why, with the evidence that led to that conclusion.
Key capabilities:
Root Cause Analysis, not just a trace. Every diagnosis comes with the evidence trail behind it and a confidence rating — the tool distinguishes "how sure we are" from "how much we actually captured," and says so plainly when it can't fully determine a cause.
Identity provider / service provider awareness. Recognizes common IdP/SP products (Microsoft Entra ID, Okta, Auth0, Keycloak, ADFS, PingFederate, ForgeRock, Shibboleth, SimpleSAMLphp) and layers vendor-specific remediation guidance on top of the generic diagnosis. Configurable per-site allow/deny list controls exactly which sites are captured.
Security posture summary. A separate, at-a-glance summary of security-relevant signals (structural signature presence/algorithm, HTTPS usage, etc.) — this is a structural check, not a cryptographic signature verification.
Flow comparison. Pick two captured flows (e.g. a working login vs. a broken one) and diff them field-by-field.
Share Diagnostics. Generate a text/Markdown report to hand to your identity team — built to omit raw NameID/attribute/cookie values so it's safe to share.
100% local. No backend, no analytics, no telemetry. Captured flows live in your browser's local storage until you delete them.
Built for identity engineers, IT admins, and support teams who are tired of eyeballing base64 SAML blobs to figure out why a login is failing.
Most SAML tools give you a raw XML dump and leave you to figure out what went wrong. ClavionX watches your SAML SSO and SLO traffic locally in the browser, correlates the AuthnRequest, Response, and logout messages into a single flow, and runs that flow through a deterministic knowledge base of real-world SAML failure modes — clock skew, signature/algorithm mismatches, missing or malformed assertions, RelayState and InResponseTo mismatches, session/cookie issues, and more — to tell you what broke and why, with the evidence that led to that conclusion.
Key capabilities:
Root Cause Analysis, not just a trace. Every diagnosis comes with the evidence trail behind it and a confidence rating — the tool distinguishes "how sure we are" from "how much we actually captured," and says so plainly when it can't fully determine a cause.
Identity provider / service provider awareness. Recognizes common IdP/SP products (Microsoft Entra ID, Okta, Auth0, Keycloak, ADFS, PingFederate, ForgeRock, Shibboleth, SimpleSAMLphp) and layers vendor-specific remediation guidance on top of the generic diagnosis. Configurable per-site allow/deny list controls exactly which sites are captured.
Security posture summary. A separate, at-a-glance summary of security-relevant signals (structural signature presence/algorithm, HTTPS usage, etc.) — this is a structural check, not a cryptographic signature verification.
Flow comparison. Pick two captured flows (e.g. a working login vs. a broken one) and diff them field-by-field.
Share Diagnostics. Generate a text/Markdown report to hand to your identity team — built to omit raw NameID/attribute/cookie values so it's safe to share.
100% local. No backend, no analytics, no telemetry. Captured flows live in your browser's local storage until you delete them.
Built for identity engineers, IT admins, and support teams who are tired of eyeballing base64 SAML blobs to figure out why a login is failing.
评分 0（1 位用户）
权限与数据
更多信息