<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Feb 4, 2016 at 3:53 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">We probably figured this out months ago, the problem is just the script and use of curl, it defaults the Content Type to form-encoded if you don't set it.</blockquote></div><br>The content-type on my POST seems to be text/xml:</div><div class="gmail_extra"><br></div><div class="gmail_extra"><div class="gmail_extra">> POST /idp/profile/SAML2/SOAP/ECP HTTP/1.1</div><div class="gmail_extra">> Host: <a href="http://shib-idp-test.www.umich.edu">shib-idp-test.www.umich.edu</a></div><div class="gmail_extra">> Authorization: Basic BLAHBLAHBLAHSTUFF</div><div class="gmail_extra">> User-Agent: curl/7.46.0</div><div class="gmail_extra">> Accept: */*</div><div class="gmail_extra">> Content-Type: text/xml; charset=utf-8</div><div class="gmail_extra">> Content-Length: 735</div><div class="gmail_extra"><br></div><div class="gmail_extra">The 500 returned by the IdP is also text/xml</div><div class="gmail_extra"><br></div><div class="gmail_extra">I think a big part of the AWS issue is our virtualization guys don't know anything about SAML and our SAML guys (incl me) don't know a damn thing about AWS.</div><div class="gmail_extra"><br></div><div class="gmail_extra"><span style="font-size:12.8px">I pointed the virt guy at some command line AWS stuff that uses form based auth, and I /think/ that works.</span><br></div><div class="gmail_extra"><span style="font-size:12.8px"><br></span></div><div class="gmail_extra"><span style="font-size:12.8px">> I can speculate your AWS issue might be that, but you'd have to sniff it.</span><div class="" style="font-size:12.8px"></div></div><div class="gmail_extra"><span style="font-size:12.8px"><br></span></div><div class="gmail_extra"><span style="font-size:12.8px">I could do that if necessary.  What are you thinking?</span></div><div class="gmail_extra"><span style="font-size:12.8px"><br></span></div><div class="gmail_extra"><span style="font-size:12.8px">Liam</span></div></div></div>