shib.conf

# Load the Shibboleth module
LoadModule mod_shib /usr/lib64/shibboleth/mod_shib_24.so

# Don't act as an outbound proxy
ProxyRequests Off

# If this proxy is behind another proxy or load balancer, then use the
# X-Forwarded-For header to determine the client address
<IfDefine Proxied>
  RemoteIPHeader X-Forwarded-For
</IfDefine>

# Use the incoming request's HTTP Host header in the outgoing proxy request
ProxyPreserveHost On

# # By default, require authentication and proxy all requests to PROXYPASS_URL
# <Location />
#   AuthType shibboleth
#   ShibRequestSetting requireSession 1
#   require shib-session
#   ProxyPass        ${PROXYPASS_URL} nocanon
#   ProxyPassReverse ${PROXYPASS_URL}
# </Location>

# # Don't proxy or enable authentication for the Shibboleth handler
# <Location /Shibboleth.sso>
#   AuthType None
#   Require all granted
#   ProxyPass !
# </Location>