Shibboleth configuration in Apache

[Badri]

Hi All,

Shibboleth is interesting and we have successfully deployed in our 
setup. The SSO works and able to use it for different subdomains.

Now the question is, we already two different groups of users in ldap. 
One contains all the users and another have only few important 
high-privileged users.
The web root directory is protected with the following configuration.
<
AuthType Shibboleth
ShibRequireSession On
ShibApplicationId default
ShibExportAssertion On
Require Shibboleth
 >

This allows all users to access. Say I want to let only the particular 
group of users in ldap those are high-privileged users. How do I do it 
here???

- Badri