UTF-8-safe Base64, processed entirely in your browser — nothing is uploaded.
Decode Base64 to XML online, free. Base64 to XML decoding reverses Base64 (RFC 4648) back to text and checks the result is well-formed XML — the quick way to read a SAML SSO response or any Base64-wrapped XML payload. Decoding runs entirely in your browser, so SAML responses and documents stay private.
It decodes UTF-8-safely and verifies well-formedness, and flags when the input was URL-safe or compressed (e.g. a deflated SAML redirect) rather than plain Base64. 100% free, no registration, and complete privacy — everything runs locally in your browser, so your data never touches a server.
Decodes the Base64 and confirms the result is well-formed XML, with the parser's reason if not.
Read a Base64-encoded SAMLResponse assertion (HTTP-POST binding) directly.
Restores the declaration, namespaces and attributes exactly as encoded.
SAML responses and payloads never leave your device.
Paste the Base64 string and click Decode. The tool decodes the bytes back to text and checks the result is well-formed XML. If it is not, the raw decoded text is still shown with the parser's reason.
A SAML SSO SAMLResponse is Base64-encoded XML — paste it here to read the assertion. Note that some bindings additionally deflate the XML before Base64 (HTTP-Redirect binding); if the decode looks like binary, it was deflated and needs inflating first. The HTTP-POST binding is plain Base64 and decodes directly.
Two common causes: the source used URL-safe Base64 (- and _ instead of + and /), or the XML was compressed before encoding. The tool reports when the decoded text is not well-formed XML so you can distinguish a bad alphabet from compressed input.
Yes. Base64 is byte-exact, so the <?xml?> declaration, namespaces and attributes are restored exactly as they were before encoding. The decoder is UTF-8-safe for non-ASCII content.
No. Decoding and well-formedness checking run entirely in your browser. SAML responses and payloads never leave your device.
We use cookies for analytics and personalized ads to help keep these tools free. Until you accept, ads stay non-personalized and analytics cookies are off. See our Privacy Policy.