Hi,
Couple of observations. If you're sending a POST to Maximo, then the tag cannot be "Publish". It needs to be "Sync", so you'll need to add a customization to your outbound integration to change this.
If you're POSTing XML to Maximo, then the content type needs to be "text/xml", not "application/xm".
The unauthorized error you're receiving is probably because of improper authentication. For authenticating, you need to pass a header of "MAXAUTH" and the value is a base64-encoded value "username:password". Also, I would remove the apikey from the header since you're using username/password.
Good luck!
------------------------------
Carlos Marin
Sharptree
Senior Integration Developer
------------------------------