https://groups.google.com/forum/#!topic/edx-code/b1ccc6dJ6ZE (/etc/apache2/conf.d)

apache2-conf.d

# Global Configuration
# This is the XML file that contains all the global, non-apache-specific
# configuration.  Look at this file for most of your configuration parameters.
ShibConfig shibboleth2.xml

# Used for example logo and style sheet in error templates.
<IfModule mod_alias.c>
  <Location /shibboleth-sp>
    Allow from all
  </Location>
  Alias /shibboleth-sp/main.css /usr/share/shibboleth/main.css
  Alias /shibboleth-sp/logo.jpg /usr/share/shibboleth/logo.jpg
</IfModule>

#
# Configure the module for content.
#
# You MUST enable AuthType shibboleth for the module to process
# any requests, and there MUST be a require command as well. To
# enable Shibboleth but not specify any session/access requirements
# use "require shibboleth".
#
<Location /secure>
          AuthType shibboleth
          ShibRequireSession On
          ShibUseHeaders On
          ShibExportAssertion On
          require valid-user
# require ATTRIBUTE_NAME  VALUE1 VALUE2 ... VALUEn
</Location>