<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:16px"><div dir="ltr" id="yui_3_16_0_ym19_1_1463067971340_3294">I have a customer trying to connect to my Shibboleth system. In their metadata, they have one endpoint for SSO:</div><div dir="ltr" id="yui_3_16_0_ym19_1_1463067971340_3252"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1463067971340_3258"><md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://compass.cudirect.com/account/samlrequest"/></div><div dir="ltr" id="yui_3_16_0_ym19_1_1463067971340_3259"><br id="yui_3_16_0_ym19_1_1463067971340_3260"></div><div dir="ltr" id="yui_3_16_0_ym19_1_1463067971340_3259">They require the authN to be signed and sent as POST, not GET. But even with just that one end point, Shib is still sending it as GET:</div><div dir="ltr" id="yui_3_16_0_ym19_1_1463067971340_3259"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1463067971340_3259"><pre style="color: rgb(34, 34, 34);" id="yui_3_16_0_ym19_1_1463067971340_3386"><b id="yui_3_16_0_ym19_1_1463067971340_3387">GET <a href="https://compass.cudirect.com/account/samlrequest?SAMLRequest=fVJbT8IwFP4rS99Zty4QbBgJwoMkqAtMH3wxbTlIk66dPZ3Kv3cXL%2FDCY9Pv%0AnjNDUZmaL5pwtFt4bwBD9FUZi7z%2FyEnjLXcCNXIrKkAeFN8t7jecxQmvvQtO%0AOUOiBSL4oJ1dOotNBX4H%2FkMreNpucnIMoUZOKR61jM3J7kWsXEV37VM6A%2BEY%0AIzraqTJaPO5KEq3aGNqKTvCf3nJqgRirZq89qNCLCKVcYwPt0vohP4nWq5y8%0ApvtEZJlMZQbTMbuZymRymEjBDiCnImHjFobYwNpiEDbkhCXpZJSMRykr0zFn%0AU54lLyQqfirearvX9u36HnIAIb8ry2I0VHkGj32NFkDmsy4n74392c7XZcXv%0AuGR%2BMaUHAwLhbFL8m3SE9YyemQ3ONX9o1derwhmtTtHCGPe59CAC5CQldD5Q%0ALs9h%2Fg0%3D%0A&RelayState=cookie%3Ab30ba62e" target="_blank" style="color: rgb(17, 85, 204);" id="yui_3_16_0_ym19_1_1463067971340_3388">https://compass.cudirect.com/<wbr id="yui_3_16_0_ym19_1_1463067971340_3389">account/samlrequest?<wbr id="yui_3_16_0_ym19_1_1463067971340_3390">SAMLRequest=<wbr id="yui_3_16_0_ym19_1_1463067971340_3391">fVJbT8IwFP4rS99Zty4QbBgJwoMkqA<wbr id="yui_3_16_0_ym19_1_1463067971340_3392">tMH3wxbTlIk66dPZ3Kv3cXL%<wbr id="yui_3_16_0_ym19_1_1463067971340_3393">2FDCY9Pv%<wbr id="yui_3_16_0_ym19_1_1463067971340_3394">0AnjNDUZmaL5pwtFt4bwBD9FUZi7z%<wbr id="yui_3_16_0_ym19_1_1463067971340_3395">2FyEnjLXcCNXIrKkAeFN8t7jecxQmv<wbr id="yui_3_16_0_ym19_1_1463067971340_3396">vQtO%0AOUOiBSL4oJ1dOotNBX4H%<wbr id="yui_3_16_0_ym19_1_1463067971340_3397">2FkMreNpucnIMoUZOKR61jM3J7kWsX<wbr id="yui_3_16_0_ym19_1_1463067971340_3398">EV37VM6A%2BEY%<wbr id="yui_3_16_0_ym19_1_1463067971340_3399">0AIzraqTJaPO5KEq3aGNqKTvCf3nJq<wbr id="yui_3_16_0_ym19_1_1463067971340_3400">gRirZq89qNCLCKVcYwPt0vohP4nWq5<wbr id="yui_3_16_0_ym19_1_1463067971340_3401">y8%<wbr id="yui_3_16_0_ym19_1_1463067971340_3402">0ApvtEZJlMZQbTMbuZymRymEjBDiCn<wbr id="yui_3_16_0_ym19_1_1463067971340_3403">ImHjFobYwNpiEDbkhCXpZJSMRykr0z<wbr id="yui_3_16_0_ym19_1_1463067971340_3404">Fn%<wbr id="yui_3_16_0_ym19_1_1463067971340_3405">0AU54lLyQqfirearvX9u36HnIAIb8r<wbr id="yui_3_16_0_ym19_1_1463067971340_3406">y2I0VHkGj32NFkDmsy4n74392c7XZc<wbr id="yui_3_16_0_ym19_1_1463067971340_3407">Xv%0AuGR%<wbr id="yui_3_16_0_ym19_1_1463067971340_3408">2BMaUHAwLhbFL8m3SE9YyemQ3ONX9o<wbr id="yui_3_16_0_ym19_1_1463067971340_3409">1derwhmtTtHCGPe59CAC5CQldD5Q%<wbr id="yui_3_16_0_ym19_1_1463067971340_3410">0ALs9h%2Fg0%3D%0A&RelayState=<wbr id="yui_3_16_0_ym19_1_1463067971340_3411">cookie%3Ab30ba62e</a> HTTP/1.1
</b><b id="yui_3_16_0_ym19_1_1463067971340_3412">Host</b>: <a href="http://compass.cudirect.com/" target="_blank" style="color: rgb(17, 85, 204);" id="yui_3_16_0_ym19_1_1463067971340_3413">compass.cudirect.com</a>
<b id="yui_3_16_0_ym19_1_1463067971340_3414">User-Agent</b>: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:46.0) Gecko/20100101 Firefox/46.0
<b id="yui_3_16_0_ym19_1_1463067971340_3415">Accept</b>: text/html,application/xhtml+<wbr id="yui_3_16_0_ym19_1_1463067971340_3416">xml,application/xml;q=0.9,*/*;<wbr id="yui_3_16_0_ym19_1_1463067971340_3417">q=0.8
<b id="yui_3_16_0_ym19_1_1463067971340_3418">Accept-Language</b>: en-US,en;q=0.5
<b id="yui_3_16_0_ym19_1_1463067971340_3419">Accept-Encoding</b>: gzip, deflate, br</pre><pre style="color: rgb(34, 34, 34);" id="yui_3_16_0_ym19_1_1463067971340_3386">Is there a way to force this one entity to send as POST instead of GET?</pre></div></div></body></html>