Christine, > <Location "/"> > AuthType shibboleth > ShibRequestSetting requireSession 1 > require shib-session > </Location> That should have done it so long as it was in the right virtual host. Did you restart httpd? What behavior are you experiencing? Is there anything in the logs? Best, Nate.