Currently I am dealing with the migration of a PHP web application from Apache 2.2 to Apache 2.4. This application is SSO-enabled, by using Shibboleth in order to manage the authentication process.The following .htaccess file is tuned to manage the authorization for Identity Classes: SSLRequireSSL   # The modules only work using HTTPSAuthType shibbolethShibRequireSession OnShibExportAssertion Off# Page can only be accessed by authenticated usersRequire valid-user# To restrict access to an Identity Class# use the configuration line below.#Require ADFS_IDENTITYCLASS Trusted Registered SharedApache is able to start correctly, but while trying to use the content under the .htaccess file above, an error occurs:/var/www/myapp/SSO/RestrictedIdentityClass/.htaccess: Unknown Authz provider: ADFS_IDENTITYCLASSTake into account that I also enabled the mod_authz_core.so, but the issue persists. Note also that I am using Microsoft ADFS as Identity Provider, and generally everything works fine.Any suggestion to point out what I am doing wrong?
Unknown Authz provider with Shibboleth on Apache 2.4
apache httpd;authentication
The Shibboleth syntax has been changed after the upgrade from Apache 2.2 to 2.4:SSLRequireSSL   # The modules only work using HTTPSAuthType shibbolethShibRequireSession OnShibExportAssertion Off# Page can only be accessed by authenticated usersRequire valid-user# To restrict access to an Identity Class# use the configuration line below.Require shib-attr ADFS_IDENTITYCLASS Trusted Registered SharedI had to add shib-attr before the identity classes to use during the authorization process.Note: be sure that the module mod_authz_core is correctly loaded in your environment.