ClavionX SAML Debugger — ClavionX

ClavionX SAML Debugger is a SAML Diagnostic Assistant, not a trace viewer.

Most SAML tools give you a raw XML dump and leave you to figure out what went wrong. ClavionX watches your SAML SSO and SLO traffic locally in the browser, correlates the AuthnRequest, Response, and logout messages into a single flow, and runs that flow through a deterministic knowledge base of real-world SAML failure modes — clock skew, signature/algorithm mismatches, missing or malformed assertions, RelayState and InResponseTo mismatches, session/cookie issues, and more — to tell you what broke and why, with the evidence that led to that conclusion.

Key capabilities:

Root Cause Analysis, not just a trace. Every diagnosis comes with the evidence trail behind it and a confidence rating — the tool distinguishes "how sure we are" from "how much we actually captured," and says so plainly when it can't fully determine a cause.
Identity provider / service provider awareness. Recognizes common IdP/SP products (Microsoft Entra ID, Okta, Auth0, Keycloak, ADFS, PingFederate, ForgeRock, Shibboleth, SimpleSAMLphp) and layers vendor-specific remediation guidance on top of the generic diagnosis. Configurable per-site allow/deny list controls exactly which sites are captured.
Security posture summary. A separate, at-a-glance summary of security-relevant signals (structural signature presence/algorithm, HTTPS usage, etc.) — this is a structural check, not a cryptographic signature verification.
Flow comparison. Pick two captured flows (e.g. a working login vs. a broken one) and diff them field-by-field.
Share Diagnostics. Generate a text/Markdown report to hand to your identity team — built to omit raw NameID/attribute/cookie values so it's safe to share.
100% local. No backend, no analytics, no telemetry. Captured flows live in your browser's local storage until you delete them.
Built for identity engineers, IT admins, and support teams who are tired of eyeballing base64 SAML blobs to figure out why a login is failing.