<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Feb 4, 2016 at 4:05 PM, Brent Putman <span dir="ltr"><<a href="mailto:putmanb@georgetown.edu" target="_blank">putmanb@georgetown.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">Hmmm, ok.  But does it also show the actual request body, or can you
    get curl to do that?  That's really what we want to know.  The IdP
    is saying that the request body isn't valid XML.</blockquote><div><br></div><div><S:Envelope xmlns:S="<a href="http://schemas.xmlsoap.org/soap/envelope/">http://schemas.xmlsoap.org/soap/envelope/</a>" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"></div><div>    <S:Body></div><div>        <samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="<a href="https://signin.aws.amazon.com/saml">https://signin.aws.amazon.com/saml</a>" ID="_6946A4FA43404B198E4BC2AE432EC6B6" IssueInstant="2016-02-04T21:16:56" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"></div><div>            <saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">urn:amazon:webservices</saml:Issuer></div><div>            <samlp:NameIDPolicy AllowCreate="1"/></div><div>            <samlp:Scoping></div><div>                <samlp:IDPList></div><div>                    <samlp:IDPEntry ProviderID="<a href="https://shib-idp-test.www.umich.edu/idp/shibboleth">https://shib-idp-test.www.umich.edu/idp/shibboleth</a>"/></div><div>                </samlp:IDPList></div><div>            </samlp:Scoping></div><div>        </samlp:AuthnRequest></div><div>    </S:Body></div><div></S:Envelope> </div></div></div><div class="gmail_extra"><br></div><div class="gmail_extra">I added the content-type header to the aws.plugin.bash that I referenced in my initial message, along with "-v".</div><div class="gmail_extra">A bad password will return a 401, and a good one a 500 with a SOAP error:</div><div class="gmail_extra"><div class="gmail_extra"><soap11:Envelope xmlns:soap11="<a href="http://schemas.xmlsoap.org/soap/envelope/">http://schemas.xmlsoap.org/soap/envelope/</a>"></div><div class="gmail_extra">    <soap11:Body></div><div class="gmail_extra">        <soap11:Fault></div><div class="gmail_extra">            <faultcode>soap11:Server</faultcode></div><div class="gmail_extra">            <faultstring>An error occurred.</faultstring></div><div class="gmail_extra">        </soap11:Fault></div><div class="gmail_extra">    </soap11:Body></div><div class="gmail_extra"></soap11:Envelope></div><div class="gmail_extra"><br></div><div class="gmail_extra">The ECP test scripts from the shib wiki work against our IdP</div><div class="gmail_extra"><br></div><div class="gmail_extra">Liam</div><div class="gmail_extra"><br></div></div></div>