S
NTMS SAML Decoder

XML Assertion & Attributes Inspector

SAML 2.0 XML Assertion & Claims Inspector

Decoded from Microsoft Entra ID signed XML response • Format: saml:Assertion

🔄 Trigger Fresh SAML Login
S

Sanjay Dubey

Signature: Valid (RSA-SHA256)
NameID: sanjay.dubey@outlook.com • Issuer: https://sts.windows.net/9e615794-d368-4fde-9aea-afdc8428411c/

Decoded SAML Attributes (Claims)

saml:AttributeStatement
SAML Attribute Name Decoded Value
userPrincipalName sanjay.dubey@outlook.com
displayName Sanjay Dubey
givenName Sanjay
surname Dubey
roles EnterpriseApp.Admin
tenantId 9e615794-d368-4fde-9aea-afdc8428411c

Raw XML Assertion Payload

XML 1.0 (Signed) 
<?xml version="1.0" encoding="UTF-8"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
                ID="_0c9b45d5-c378-4acd-be50-93f3a7d50946"
                Version="2.0"
                IssueInstant="2026-10-13T10:43:31.482Z"
                Destination="https://saml.ntmscloud.in/saml/acs"
                InResponseTo="_sample_request_id_2026">
    <saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://sts.windows.net/9e615794-d368-4fde-9aea-afdc8428411c/</saml:Issuer>
    <samlp:Status>
        <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
    </samlp:Status>
    <saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
                    ID="_fccc7d7f-2a8a-40a5-ba71-3ce44c68c47e"
                    Version="2.0"
                    IssueInstant="2026-10-13T10:43:31.482Z">
        <saml:Issuer>https://sts.windows.net/9e615794-d368-4fde-9aea-afdc8428411c/</saml:Issuer>
        <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
            <ds:SignedInfo>
                <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
                <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
                <ds:Reference URI="#_fccc7d7f-2a8a-40a5-ba71-3ce44c68c47e">
                    <ds:Transforms>
                        <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
                        <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
                    </ds:Transforms>
                    <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
                    <ds:DigestValue>8fK9e3...SampleDigestValue==</ds:DigestValue>
                </ds:Reference>
            </ds:SignedInfo>
            <ds:SignatureValue>d8F2k...SampleRsaSignatureValue==</ds:SignatureValue>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>MIIC8DCCAdigAwIBAgIQ...SampleEntraIdpX509Certificate==</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </ds:Signature>
        <saml:Subject>
            <saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">sanjay.dubey@outlook.com</saml:NameID>
            <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
                <saml:SubjectConfirmationData NotOnOrAfter="2026-10-13T11:43:31.482Z"
                                              Recipient="https://saml.ntmscloud.in/saml/acs"/>
            </saml:SubjectConfirmation>
        </saml:Subject>
        <saml:Conditions NotBefore="2026-10-13T10:42:31.482Z"
                         NotOnOrAfter="2026-10-13T11:43:31.482Z">
            <saml:AudienceRestriction>
                <saml:Audience>https://saml.ntmscloud.in/saml/metadata</saml:Audience>
            </saml:AudienceRestriction>
        </saml:Conditions>
        <saml:AttributeStatement>
            <saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name">
                <saml:AttributeValue>sanjay.dubey@outlook.com</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://schemas.microsoft.com/identity/claims/displayname">
                <saml:AttributeValue>Sanjay Dubey</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname">
                <saml:AttributeValue>Sanjay</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname">
                <saml:AttributeValue>Dubey</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/role">
                <saml:AttributeValue>EnterpriseApp.Admin</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://schemas.microsoft.com/identity/claims/tenantid">
                <saml:AttributeValue>9e615794-d368-4fde-9aea-afdc8428411c</saml:AttributeValue>
            </saml:Attribute>
        </saml:AttributeStatement>
    </saml:Assertion>
</samlp:Response>