SAML POST Form Generator

Build SAML HTTP-POST binding forms

The HTTP-POST binding sends SAMLRequest or SAMLResponse as a hidden form field to an IdP SSO URL or SP assertion consumer service. Browsers auto-post the payload; optional RelayState carries return URLs or CSRF tokens.

Enter the POST destination, paste SAML XML (or an already Base64-encoded parameter), and copy the generated HTML. Use auto-submit for local SSO debugging, or leave it off to inspect the form first. For redirect binding URLs, use the SAML Redirect Binding Builder; to read inbound parameters, try the SAML Request Decoder.

Safety notes

• Test only against endpoints you control or have permission to hit.
• Unsigned requests are for lab use, production flows require proper signing and TLS.
• HTML is generated locally; save it as a file and open it offline if your policy requires it.