HtAccessControl

This AccessControl plugin is supplied and installed by mod_shib, the SP Apache module. As long as the <RequestMapProvider> type is edu.internet2.middleware.shibboleth.sp.provider.NativeRequestMapProvider, this plugin is automatically enabled for all requests on Apache.

It supports an access control syntax derived from Apache .htaccess file syntax, which relies primarily on the Require command. Rules are created by specifying the Alias of an attribute established by the SP's AttributeAcceptancePolicy and the possible values (or regular expressions if the alias is followed by the ~ symbol) to match.

The ShibRequireAll command means that all rules must successfully apply, unlike Apache's usual practice of granting access if any requirement is met.