If you want to configure entityIDSelf using ShibRequestSetting, it must apply to /Shibboleth.sso. That is, <Location /secure> ShibRequestSetting entityIDSelf https://$hostname/shibboleth </Location> does NOT work as you would expect. Best regards, Takeshi