Wiresharked the URL the .js is sending,... it's the right URL. When I put that URL in a browser I can log in and it works.
Can you recommend a tool that will help me debug the SAML challenge and response? I can't seem to find out where my auth is going wrong.