AWS + ECP?

[Brent Putman]

On 2/4/16 4:21 PM, Liam Hoekenga wrote:
>
> On Thu, Feb 4, 2016 at 4:05 PM, Brent Putman <putmanb at georgetown.edu
> <mailto:putmanb at georgetown.edu>> wrote:
>
>     Hmmm, ok.  But does it also show the actual request body, or can
>     you get curl to do that?  That's really what we want to know.  The
>     IdP is saying that the request body isn't valid XML.
>
>
> <S:Envelope xmlns:S="http://schemas.xmlsoap.org/soap/envelope/"
> xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
>     <S:Body>
>         <samlp:AuthnRequest
> xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
> AssertionConsumerServiceURL="https://signin.aws.amazon.com/saml"
> ID="_6946A4FA43404B198E4BC2AE432EC6B6"
> IssueInstant="2016-02-04T21:16:56"
> ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
> Version="2.0">
>             <saml:Issuer
> xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">urn:amazon:webservices</saml:Issuer>
>             <samlp:NameIDPolicy AllowCreate="1"/>
>             <samlp:Scoping>
>                 <samlp:IDPList>
>                     <samlp:IDPEntry
> ProviderID="https://shib-idp-test.www.umich.edu/idp/shibboleth"/>
>                 </samlp:IDPList>
>             </samlp:Scoping>
>         </samlp:AuthnRequest>
>     </S:Body>
> </S:Envelope> 
>



Is that literally the raw output of the aws.plugin.bash with curl -v or
whatever?  Just making sure b/c it doesn't look like that script
indents, pretty-prints, etc.  We need to know the unadulterated raw
request body.

Also confused about the earlier output that was showing the request with
'text/xml'.  My testing shows that curl with "-d" sends  "Content-Type:
application/x-www-form-urlencoded".  Which jibes with what we previously
thought.  Wondering if there's differences in various versions of curl. 
Mine is 7.30.0.

In any case, if the IdP says it's not valid XML in the body, then I
believe it.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160204/847dd1a0/attachment.html>