Group Based Authorization for Apache Shibboleth SP Site

[Peter Schober]

Bhagwat, Shrikant via users <users at shibboleth.net> [2024-03-22 17:54 CET]:
> I have Apache server with Shibboleth Service Provider.
> 
> https://shibboleth.atlassian.net/wiki/spaces/SHIB2/pages/2577072327/NativeSPApacheConfig

That's the documentation for the old, no longer supported, version of
the Shibboleth SP software, as indicated in the header of that page.

> How do I add Role based Authorization for /secure page ? Only if
> user has "Role" they access the site.
> 
> I will have Roles through SAML Assertions.

First you'd make sure you're mapping the SAML Attributes from the
Assertion tp internal attributes. See attribute-map.xml and the docs at
https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065334421/XMLAttributeExtractor

You can find examples of authorization rules here:

SP3 wiki -> Getting started -> Apache -> htaccess:
https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065335056/htaccess

HTH,
-peter