Posting data through shibboleth

[Detwiler, Michael]

I'm trying to POST data from one website to another, with the destination being behind Shibboleth.  I found this link which details the settings needed to ensure the data isn't lost.
https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065335423/CommonErrors#CommonErrors-HTTPPOSTformdataislostwhenShibbolethsessionexpiredordoesnotexistyet

<Sessions lifetime="28800" timeout="1800" checkAddress="false"  handlerURL="/Shibboleth.sso" handlerSSL="true" cookieProps="; path=/; HttpOnly; Secure; SameSite=None" idpHistory="false" idpHistoryDays="7" postData="ss:mem" postTemplate="postTemplate.html">

Once I make the adjustments I get a 500 when I POST to my website behind Shibboleth, however GET succeed without error.  If I remove the postData/postTemplate attributes, I can POST successfully (albeit without data).

shibd.log
2024-08-23 10:34:22 DEBUG Shibboleth.Listener [1]: dispatching message (default::getHeaders::Application)
2024-08-23 10:34:22 DEBUG Shibboleth.Listener [1] [default]: dispatching message (default/Login::run::SAML2SI)
2024-08-23 10:34:22 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1] [default]: validating input
2024-08-23 10:34:22 DEBUG OpenSAML.MessageEncoder.SAML2 [1] [default]: tracking request (_a877d76a81a9a31574a91d0da55f7d4d) against RelayState token (cookie:1724423662_2348)
2024-08-23 10:34:22 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1] [default]: marshalling, deflating, base64-encoding the message
2024-08-23 10:34:22 DEBUG XMLTooling.XMLObject [1] [default]: starting to marshal samlp:AuthnRequest
2024-08-23 10:34:22 DEBUG XMLTooling.XMLObject [1] [default]: creating root element to marshall
2024-08-23 10:34:22 DEBUG XMLTooling.XMLObject [1] [default]: marshalling namespace attributes for XMLObject
2024-08-23 10:34:22 DEBUG XMLTooling.XMLObject [1] [default]: marshalling text and child elements for XMLObject
2024-08-23 10:34:22 DEBUG XMLTooling.XMLObject [1] [default]: starting to marshalling saml:Issuer
2024-08-23 10:34:22 DEBUG XMLTooling.XMLObject [1] [default]: creating root element to marshall
2024-08-23 10:34:22 DEBUG XMLTooling.XMLObject [1] [default]: marshalling namespace attributes for XMLObject
2024-08-23 10:34:22 DEBUG XMLTooling.XMLObject [1] [default]: marshalling text and child elements for XMLObject
2024-08-23 10:34:22 DEBUG XMLTooling.XMLObject [1] [default]: caching DOM for XMLObject
2024-08-23 10:34:22 DEBUG XMLTooling.XMLObject [1] [default]: starting to marshalling samlp:NameIDPolicy
2024-08-23 10:34:22 DEBUG XMLTooling.XMLObject [1] [default]: creating root element to marshall
2024-08-23 10:34:22 DEBUG XMLTooling.XMLObject [1] [default]: marshalling namespace attributes for XMLObject
2024-08-23 10:34:22 DEBUG XMLTooling.XMLObject [1] [default]: marshalling text and child elements for XMLObject
2024-08-23 10:34:22 DEBUG XMLTooling.XMLObject [1] [default]: caching DOM for XMLObject
2024-08-23 10:34:22 DEBUG XMLTooling.XMLObject [1] [default]: caching DOM for XMLObject (document is bound)
2024-08-23 10:34:22 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL=https://domain/Shibboleth.sso/SAML2/POST Destination=https://domain/idp/profile/SAML2/Redirect/SSO ID="_a877d76a81a9a31574a91d0da55f7d4d" IssueInstant="2024-08-23T14:34:22Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://domain/shibboleth</saml:Issuer><samlp:NameIDPolicy<https://domain/shibboleth%3c/saml:Issuer%3e%3csamlp:NameIDPolicy> AllowCreate="1"/></samlp:AuthnRequest>
2024-08-23 10:34:22 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1] [default]: message encoded, sending redirect to client

Thanks,
-Michael
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240823/493fd153/attachment.htm>