How do I capture my SAML authentication request and response?

There are several options for browser plug-ins such as Firefox and Chrome that can be used to capture your SAML requests and responses. If you don't want to use a plug-in, Atlassian provides instructions for a more manual extraction approach.

I don't understand the messages! How can I decode them?

If you're still having trouble after using your SAML debug tool, try using the SAML developer tools for more help decoding your messages. Don't forget! Depending on where you intercept your SAML messages, your request might be URL encoded, base 64 encoded and deflated, or encrypted.

Do not use online tools for decrypting SAML messages like your SAML response. The tools need access to the encryption private key to decrypt the information. The key should be kept private and access controlled. The decryption tool that is mentioned in this section must be used for debugging purposes only.