<Location /app>
  AuthType shibboleth
  ShibRequestSetting requireSession 1
  ShibRequireSession on
  Require shibboleth

  Options +ExecCGI
  AddHandler cgi-script .py

  DirectoryIndex index.py
</Location>

<Location /app/admin>
  AuthType shibboleth
  ShibRequestSetting requireSession 1
  ShibRequireSession on
  Require shib-attr eduPersonEntitlement urn:mace:example.edu:admin urn:mace:example.edu:superUser
  ErrorDocument 401 /app/accessError.html
  
  DirectoryIndex index.html
</Location>