SAML trace for authentication issues

When using Active Directory groups for the SAML authentication, it should be visible what the SAML token response is to determine if there is an error in the role name or in the actual response.

There are tracers available, but these need to be used on the local machine, so it would be ideal to see the SAML response in a report or log to support and troubleshoot faster