shibboleth 2.4 ds

[Rod Widdowson]

You do need to make sure that the DS end points aren’t being protected by shib.  I don't speak apache too good, but 
    <Location /shibboleth-sp>
        AuthType None
        Require all granted
    </Location>

Doesn't look too good.

R