AuthType shibboleth
ShibRequestSetting requireSession 1
Require shib-session