3632258 - How to Capture SAML Traces (Including Network Logs) Without Browser Extensions

There is a need to trace an issue with SAML authentication. Browsers now contain add-ons that specifically trace SAML.

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental. 

SAP SuccessFactors HCM suite

To capture it using a network trace without downloading the extension, follow the steps below:

• • Capture the Network trace log​ (Open Chrome or Edge > Press F12 or Right-click > Inspect to open Developer Tools > Click on the Network tab > Check the box "Preserve log"          

• • Reproduce the issue (e.g. attempt the login or trigger the action).
  • Find the SAML traffic. ​
  • Click on the SAML link, then click the ”Payload” tab​

            ​

• •  Go to "WIndows PowerShell" in your system.

• • Run below Commands:  

                      First:

                       $saml = "PASTE_YOUR_SAML_PAYLOAD_HERE"

                       $decoded = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($saml))

                       then:

                       $decoded | Out-File -FilePath "saml-decoded.xml" -Encoding UTF8

                Example:

• • • • Open the output file saml-decoded.xml using a browser, Notepad, or Notepad++.

• KBA : 2461862 – Collecting SAML traces with Chrome, Edge, or Firefox

Capture SAML trace using network trace, collect SAML trace in browser, SAML login issue network trace, SAMLResponse trace Chrome, SAML trace Edge Firefox, collect SAML debug logs, SAML authentication network capture, troubleshoot SSO with SAML, SAML request response trace, SAML Trace, SuccessFactors, Platform , KBA , LOD-SF-PLT-SAM , SAML SSO First Time Setup , LOD-SF-PLT-SEL , SSO Errors & Logs , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , How To