CRX id
paijfdbeoenhembfhkhllainmocckace
paijfdbeoenhembfhkhllainmocckace
Description from extension meta
Extends the Developer Tools, adding support for SAML Requests and Responses to be displayed in the Developer Tools window
Image from store
Description from store
This is an Open Source SAML debugger for Chrome. It operates as another panel in the Chrome Developer Tools section, which monitors the traffic in the current active tab. This panel is trying to replicate what the Firefox version of SAML Tracer does as there wasn't a good enough one (or any) for Chrome at the time of writing this.
GitHub Repo: https://github.com/milton-lai/saml-chrome-panel
Feel free to branch and help make this even better!
It is designed to display all network traffic, along with the request and response data. If there is a SAML request or response, then it will grab the message, format it nicely and show it to you in another tab.
Updates:
- Set links to open in the same browser
-- There is a new feature to "Scrub" the links in the current page. Basically, it will update all anchor tags and set their target attribute to equal '_self'. This should address the issue of having SAML transactions opening up in new tabs and such. This is the best implementation I could think of as I'm unable to listen to all traffic on all tabs.
- Import and export the network traffic.
-- It imports and exports the traffic on the browser in a JSON format.
- Toggle showing SAML traffic.
Please note that at the moment, I've only looked at OpenAM Redirect and POST SAML transactions (as that is what I've got access to). If there are others which are working, please let me know. If there are SSO frameworks that are not working, then also please let me know and I'll try to get it working (e.g. SOAP).
Thanks to @jasonwzs (https://github.com/jasonwzs) and @AlmogBaku (https://github.com/AlmogBaku) for contributing
Update (2023-06-03):
-- Updating to use Manifest v3. No real changes.
Update (2021-05-02):
-- Fixing update-links functionality
Update (2020-07-18):
-- Updated internal libraries.
-- Reduced extension size.
-- Minor code cleanup.
-- Increased SAML font size.
Update (2017-11-19):
-- Added toggle limit of 500 network requests, to keep memory footprint smaller.
-- Added Search option for the SAML tab.
Latest reviews
- (2023-11-07) Paula Martínez: Para mi gusto, la peor de las tres opciones de extensión que hay para Chrome, te obliga a estar inspeccionando y si no estás inspeccionando de antes de que se lancen las llamadas a SAML, no te aparecen, cuando las demás extensiones te las muestra la abras cuando la abras
- (2023-10-19) Yvan MARGUERITE: Hi, I have a Version 118.0.5993.89 and the panel doesn't show up on the dev tools. Why ? Can you help me ? Thanks
- (2023-08-10) jayesh kothari: Recently, the panel doesn't show up on the dev tools. I have tried on Mac, windows(PC, AVD, Citrix) and randomly it would just show up after multiple attempts of opening and closing the browser completely. This was the extension of choice always but no longer.
- (2023-02-16) David Tod: Excellent. Does the job and solves the problem. Would love to see it support other base64-encoded data like OAuth (id_token) and LTI (lti_message_hint).
- (2022-03-16) Jack Cuneo: Great extension. Just add to Chrome, open Dev Tools, choose the spiffy new "SAML" tab that appears there, and run through your flow. Looks good, works well, and building it into Dev Tools makes it unobtrusive. Thank you!
- (2021-12-14) Evan Goldstein: Extremely helpful in diagnosing SAML issues!
- (2021-03-31) Jason Pociask: Great tool, I commend and thank you and collaborators for developing it.
- (2020-07-29) [HV,IP,FOB] Craig Ellrod [ɧ۷ 0x00]: Doesn't work. Chrome. Version 84.0.4147.89 (Official Build) (64-bit).
- (2020-07-02) Jaap-Willem Dooge: This extension seems to have stopped working. It was suuuper useful before. I hope it gets fixed.
- (2019-08-11) Adrian Pavelescu: Works quite well. I had to write a multi-tenant SAML integration layer and this little guy was incredibly useful, and it continues to be useful with pretty much every new customer that wants SSO... there's always some kind of hiccup and this helps with discovery.
- (2019-05-15) Dom Kirby: Super easy to use, does a good job!
- (2019-04-12) Madhur Arora: There are two Tabs along with SAML i.e. Request and Response, what exactly does these tabs show.
- (2019-03-12) Leebo M: Crashes very easily.
- (2018-12-13) Sascha Gottfried: Very helpful for debugging SAML requests and responses. Installed, just worked. Thanks.
- (2018-04-19) Jordan Durzi: Works well, prefer that it integrates into developer tools. Makes things easier and doesn't look like an eye sore.
- (2017-12-08) Blessed Tabvirwa: Awesomeness!!!!!!!!!!
- (2017-11-22) Jeff Olson: This is a great and very helpful extension. One thing I would like to know - is it possible to change the font size?
- (2017-10-13) Very helpfull to analyze SAML issues!
- (2017-05-16) Artyom Nikitin: Hello! I am a representative of the company Mr Ads., Which is a leader in monetizing browser extensions. Currently Mr Ads- the most advanced and profitable platform for profitable cooperation. Based on the above we want to make you a better offer for collaborating. We offer more than 10 types of monetization, each of which has confirmed unique effectiveness. Depending on your needs, we provide several methods of monetizating- from the soft to the hard methods. Be sure No negative experiences from users - Only appropriate and clear advertising. In addition, by providing an individual approach, we take into account the wishes of each partner.Please, take the most note that, our system didn't conflict with other systems, so you can easily earn extra income. Why cooperate with us is profitable: Without the slightest effort you can give yourself a high revenue. Payments are carried out on request. No delays and no minimum amount. Select a payment system that is preferable for you. Lightweight and easy to use interface will provide full comfort for webmasters. Responsive support service instantly answer all the questions that interest you. The complete absence of restrictions on the GEO. Detailed statistics in real time. Failures and disturbances in the system are excluded. Profitable Refferal Program. In conjuction with Mr Adsyour extension “SAML Chrome Panel ” will become a reliable guarantee of maximum profit. High earnings, combined with comfort for users- Now it's really! If you are interested in our offer or have any questions or suggestions, please feel free contact with us. We look forward for collaboration!!! Skype: ed.mr ads Email: [email protected]
- (2017-02-02) Andrew Wilmut: Excellent tool. Good layout and does what it says.
- (2016-12-06) Kevin Ashton: Great interface. Works well and without issue. Best SAML extension I've found.
- (2016-10-05) Gerardo Lopez: Can't figure out how to use it. I tried logging into a site with SAML and it doesn't popup. I tried selecting "SAML Chrome Panel" from the menu bar, and it just redirects me back to the Chrome App Store. The only other option besides hide is to remove from Chrome -- thank goodness that feature works.
- (2016-04-12) Jonathas Morais: Helps a lot not having to use other apps to inspect network traffic, filtering or having to get the base64 content, decode, etc just to get the SAML content. Great work!
- (2015-12-22) Martin van Es: Now that is has import/export it's very useful (for SSO support). I was looking for a SAML message filter and found the "Toggle traffic" button did the trick. Nice, but not the right term. "SAML Filter" would be more appropriate I think?
- (2015-11-18) Jose Reyes: would be nice if developer tools or even this plug in worked for all active tabs. some items we need to trace open in new tabs. the firefox plug in traces all tabs that have traffic.
- (2015-09-01) Pete B: Very effective long over due tool. Would be nice to see some colour in the output simply for ease of reading.
- (2015-09-01) A W: Simple yet effective tool - good interface, yet powerful. Saved our company many hours and $$$.
Latest issues
- (2022-06-27, v:1.9.3) Max Dudzinski: Doesn't seem to support reading SAMLResponse :(
Given a URL containing SAMLResponse e.g. when carrying out Single Log-Out, the SAMLResponse query param is not recognised & the LogoutResponse is not read. Even when SAML filter is disabled & network request is selected directly, no SAML sub-tab appears :( - (2021-09-01, v:1.9.2) Shane Mitchell: Tab does not show once installed
Tab does not show once installed Google Chrome 93.0.4577.63 (Official Build) (64-bit) (cohort: 93_Win_63) OS Windows 10 OS Version 1909 (Build 18363.1556) - (2021-02-12, v:1.9.1) korin (andrew): Update links no longer works
For some reason, the button to “Update all link/form targets to _self” no longer works. When I click it, nothing happens. I can manually change the target in the Elements panel, but having a single button to do it automatically was really a huge bonus. - (2017-04-27, v:1.8.7) Adding this extension broke SAML
After I added this extension, my Shibboleth-based SSO solution completely stopped working, with error 2746 "Error reading request body from browser". The extension appears to consume/corrupt the SAML request in such a way that the Shibboleth ISAPI module cannot use it any more. Uninstalled. - (2016-12-25, v:1.8.7) kedari GOUTHAM: Authentication pop up
We have implemented SSO for Facebook application using kerberos authentication. If Kerebros fail user is prompted with Authentication pop-up. From SP SAML request is getting generated successfully and user credential pop up is prompted but after entering the user credentials again repetedly it is prompting the Authentication pop-up. - (2016-04-08, v:1.8.5) Martin van Es: Passwords
In the current form, the plugin exports all HTTP traffic, including usernamee and passwords POST'ed on IdP. This is very dangerous behaviour and should be prevented, or at least preventable by choosing a "mask" function in export, just like SAML Tracer in firefox. - (2016-03-17, v:1.8.5) Broken after chrome update
Seems like SAML tab page does not appear anymore after latest Chrome update - (2015-10-14, v:1.7) Martin van Es: Import/Export
One of the useful features of FF's SAML tracer is import/export. This is extremely helpful for SSO support. - (2015-09-01, v:1.3) Harpreet Singh: Did not work for me
Tried doing a SSO on couple of sites, but the SAML Chrome wont show anything. (I had kept open the SAML Chrome tab open within the Developers tool before initiating the SAML messages). The same works in Firefox - SAML Tracer.