This tool performs structural validation only. Cryptographic signature verification requires the IdP's public key which should be done server-side.