What it can do
- Decode a Base64 transport wrapper
- Inflate raw DEFLATE data
- Indent the recovered SAML XML
How the recipe works
From Base64
Recover the compressed bytes.
Raw Inflate
Inflate the HTTP-Redirect binding payload.
XML Beautify
Make nested XML elements readable.
Demonstration
Sample input
fc5BCoMwFATQq0gOYEqXnxgodCO0G3uCoB8aSPI/mQgev7QudNXlDMxjHEJOShNDpYC7LacC+pWDWWshCYigEjKD2kyv2/NB1/5CWqXJLMl0430wC2cx3n13NAIr15P0HwoA1xalGP9uTUHWxkV73kLWxM6eTL+n467/AA==Expected result
https://idp.exampleWhen to use it
- SSO debugging
- Identity-provider integration
- Learning the SAML message structure
Adapt it
Some SAML values are Base64-encoded XML without DEFLATE. Disable Raw Inflate when the first decoded bytes already begin with XML.
Source and verification
Adapted from kraven-security CyberChef recipes. The explanation and sample are written for Serialize, use synthetic or documentation-safe data, and are checked against the current operation catalogue. The workflow runs locally without an external API call.