Best way to secure single page apps?

[Klingenstein, Nate]

Blaster,

Tried googling but didn't find any relevant results, anyone have any ideas?

None here, but I have no experience dealing with URL fragments.  Based on your description and this archived message:

http://shibboleth.net/pipermail/users/2016-April/028735.html

I strongly suspect you're going to need to move this logic into the application to the extent possible since the SP never sees the fragments in the first place.  That makes it hard for it to operate on them.

Oh and also, can you (and how) check shibboleth session (if there's an active one) in apache .conf files?

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPhtaccess

Take care,
Nate.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161129/657ac2ae/attachment.html>