AuthType shibboleth
Require shibboleth
ShibRequestSetting requireSessionWith SU