...
- Requiring an authenticated session (known to Shibboleth) based on the URL of a resource
- A plugin API (=
IAccessControl=) for attaching AccessControl modules via the RequestMap facility, plus an XML-flavored sample - Integration with native web server access control features using the plugin API (Apache only)
The first bullet is not really an AccessControl feature; it simply allows a declarative requirement for authentication based on the URL via the RequestMap facility. Note that the Apache commands supported (e.g. =ShibRequireSession=) are implemented as an extended RequestMap plugin that permits these settings to be declared either in the Apache configuration, .htaccess files, or ShibbolethXml.
...
Others might of course be available in the future, possible from independent sources.%COMMENT%