SAML Chrome Panel
Extends the Developer Tools, adding support for SAML Requests and Responses to be displayed in the Developer Tools window
This is an Open Source SAML debugger for Chrome. It operates as another panel in the Chrome Developer Tools section, which monitors the traffic in the current active tab. This panel is trying to replicate what the Firefox version of SAML Tracer does as there wasn't a good enough one (or any) for Chrome at the time of writing this.
GitHub Repo: https://github.com/milton-lai/saml-chrome-panel
Feel free to branch and help make this even better!
It is designed to display all network traffic, along with the request and response data. If there is a SAML request or response, then it will grab the message, format it nicely and show it to you in another tab.
Updates:
- Set links to open in the same browser
-- There is a new feature to "Scrub" the links in the current page. Basically, it will update all anchor tags and set their target attribute to equal '_self'. This should address the issue of having SAML transactions opening up in new tabs and such. This is the best implementation I could think of as I'm unable to listen to all traffic on all tabs.
- Import and export the network traffic.
-- It imports and exports the traffic on the browser in a JSON format.
- Toggle showing SAML traffic.
Please note that at the moment, I've only looked at OpenAM Redirect and POST SAML transactions (as that is what I've got access to). If there are others which are working, please let me know. If there are SSO frameworks that are not working, then also please let me know and I'll try to get it working (e.g. SOAP).
Thanks to @jasonwzs (https://github.com/jasonwzs) and @AlmogBaku (https://github.com/AlmogBaku) for contributing
Update (2023-06-03):
-- Updating to use Manifest v3. No real changes.
Update (2021-05-02):
-- Fixing update-links functionality
Update (2020-07-18):
-- Updated internal libraries.
-- Reduced extension size.
-- Minor code cleanup.
-- Increased SAML font size.
Update (2017-11-19):
-- Added toggle limit of 500 network requests, to keep memory footprint smaller.
-- Added Search option for the SAML tab.
Latest reviews
I see the most recent reviews, however this is working great for me now and has been a lifesaver for troubleshooting.
Literally just doesn't work at all, even after relaunching the browser. This used to be good, worthless now.
This extension is currently broken. It does not show up in DevTools.
This used to be a 5* product and was my go-to for SAML for over 2 years, but it hasn't worked for like a year now, just like the other reviews state, does not show up any more in Developer Tools even when enabled. Please restore it to what it used to be when you could actually access it to use it, and not just mine but every review will be 5*s again.
Not showing in the Dev tools for Version 122.0.6261.129 (Official Build) (64-bit)? What is the issue guys? Lots of reviews about same issue but still not permanent fix. Can you please fix this permanently? Thanks in advance.
Para mi gusto, la peor de las tres opciones de extensión que hay para Chrome, te obliga a estar inspeccionando y si no estás inspeccionando de antes de que se lancen las llamadas a SAML, no te aparecen, cuando las demás extensiones te las muestra la abras cuando la abras
Hi, I have a Version 118.0.5993.89 and the panel doesn't show up on the dev tools. Why ? Can you help me ? Thanks
Hi, I have a Version 118.0.5993.89 and the panel doesn't show up on the dev tools. Why ? Can you help me ? Thanks
Recently, the panel doesn't show up on the dev tools. I have tried on Mac, windows(PC, AVD, Citrix) and randomly it would just show up after multiple attempts of opening and closing the browser completely. This was the extension of choice always but no longer.
Recently, the panel doesn't show up on the dev tools. I have tried on Mac, windows(PC, AVD, Citrix) and randomly it would just show up after multiple attempts of opening and closing the browser completely. This was the extension of choice always but no longer.
Excellent. Does the job and solves the problem. Would love to see it support other base64-encoded data like OAuth (id_token) and LTI (lti_message_hint).
Excellent. Does the job and solves the problem. Would love to see it support other base64-encoded data like OAuth (id_token) and LTI (lti_message_hint).
Great extension. Just add to Chrome, open Dev Tools, choose the spiffy new "SAML" tab that appears there, and run through your flow. Looks good, works well, and building it into Dev Tools makes it unobtrusive. Thank you!
Great extension. Just add to Chrome, open Dev Tools, choose the spiffy new "SAML" tab that appears there, and run through your flow. Looks good, works well, and building it into Dev Tools makes it unobtrusive. Thank you!
Extremely helpful in diagnosing SAML issues!
Extremely helpful in diagnosing SAML issues!
Great tool, I commend and thank you and collaborators for developing it.
Doesn't work. Chrome. Version 84.0.4147.89 (Official Build) (64-bit).
Doesn't work. Chrome. Version 84.0.4147.89 (Official Build) (64-bit).
This extension seems to have stopped working. It was suuuper useful before. I hope it gets fixed.
This extension seems to have stopped working. It was suuuper useful before. I hope it gets fixed.
Works quite well. I had to write a multi-tenant SAML integration layer and this little guy was incredibly useful, and it continues to be useful with pretty much every new customer that wants SSO... there's always some kind of hiccup and this helps with discovery.
Works quite well. I had to write a multi-tenant SAML integration layer and this little guy was incredibly useful, and it continues to be useful with pretty much every new customer that wants SSO... there's always some kind of hiccup and this helps with discovery.
Super easy to use, does a good job!
Super easy to use, does a good job!
There are two Tabs along with SAML i.e. Request and Response, what exactly does these tabs show.
There are two Tabs along with SAML i.e. Request and Response, what exactly does these tabs show.
Crashes very easily.
Crashes very easily.
Very helpful for debugging SAML requests and responses. Installed, just worked. Thanks.
Very helpful for debugging SAML requests and responses. Installed, just worked. Thanks.
Works well, prefer that it integrates into developer tools. Makes things easier and doesn't look like an eye sore.
Works well, prefer that it integrates into developer tools. Makes things easier and doesn't look like an eye sore.
Awesomeness!!!!!!!!!!
Awesomeness!!!!!!!!!!
This is a great and very helpful extension. One thing I would like to know - is it possible to change the font size?
This is a great and very helpful extension. One thing I would like to know - is it possible to change the font size?
Very helpfull to analyze SAML issues!
Very helpfull to analyze SAML issues!
Hello! I am a representative of the company Mr Ads., Which is a leader in monetizing browser extensions. Currently Mr Ads- the most advanced and profitable platform for profitable cooperation. Based on the above we want to make you a better offer for collaborating. We offer more than 10 types of monetization, each of which has confirmed unique effectiveness. Depending on your needs, we provide several methods of monetizating- from the soft to the hard methods. Be sure No negative experiences from users - Only appropriate and clear advertising. In addition, by providing an individual approach, we take into account the wishes of each partner.Please, take the most note that, our system didn't conflict with other systems, so you can easily earn extra income. Why cooperate with us is profitable: Without the slightest effort you can give yourself a high revenue. Payments are carried out on request. No delays and no minimum amount. Select a payment system that is preferable for you. Lightweight and easy to use interface will provide full comfort for webmasters. Responsive support service instantly answer all the questions that interest you. The complete absence of restrictions on the GEO. Detailed statistics in real time. Failures and disturbances in the system are excluded. Profitable Refferal Program. In conjuction with Mr Adsyour extension “SAML Chrome Panel ” will become a reliable guarantee of maximum profit. High earnings, combined with comfort for users- Now it's really! If you are interested in our offer or have any questions or suggestions, please feel free contact with us. We look forward for collaboration!!! Skype: ed.mr ads Email: [email protected]
Excellent tool. Good layout and does what it says.
Excellent tool. Good layout and does what it says.
Great interface. Works well and without issue. Best SAML extension I've found.
Great interface. Works well and without issue. Best SAML extension I've found.
Can't figure out how to use it. I tried logging into a site with SAML and it doesn't popup. I tried selecting "SAML Chrome Panel" from the menu bar, and it just redirects me back to the Chrome App Store. The only other option besides hide is to remove from Chrome -- thank goodness that feature works.
Can't figure out how to use it. I tried logging into a site with SAML and it doesn't popup. I tried selecting "SAML Chrome Panel" from the menu bar, and it just redirects me back to the Chrome App Store. The only other option besides hide is to remove from Chrome -- thank goodness that feature works.
Helps a lot not having to use other apps to inspect network traffic, filtering or having to get the base64 content, decode, etc just to get the SAML content. Great work!
Helps a lot not having to use other apps to inspect network traffic, filtering or having to get the base64 content, decode, etc just to get the SAML content. Great work!
Now that is has import/export it's very useful (for SSO support). I was looking for a SAML message filter and found the "Toggle traffic" button did the trick. Nice, but not the right term. "SAML Filter" would be more appropriate I think?
Now that is has import/export it's very useful (for SSO support). I was looking for a SAML message filter and found the "Toggle traffic" button did the trick. Nice, but not the right term. "SAML Filter" would be more appropriate I think?