--- loncom/loncapa_apache.conf	2012/02/28 15:14:25	1.211
+++ loncom/loncapa_apache.conf	2012/03/05 20:51:25	1.212
@@ -1,7 +1,7 @@
 ##
 ## loncapa_apache.conf -- Apache HTTP LON-CAPA configuration file
 ##
-## $Id: loncapa_apache.conf,v 1.211 2012/02/28 15:14:25 raeburn Exp $
+## $Id: loncapa_apache.conf,v 1.212 2012/03/05 20:51:25 raeburn Exp $
 ##
 
 #
@@ -52,6 +52,12 @@ PerlCleanupHandler	Apache::lonacc::clean
 PerlAuthenHandler Apache::checkauthen
 PerlSetVar lonOtherAuthen no
 
+<IfModule mod_shib>
+    PerlAuthenHandler Apache::lonshibauth
+    PerlSetVar lonOtherAuthen yes
+    PerlSetVar lonOtherAuthenType Shibboleth
+</IfModule>
+
 #PerlWarn On
 <LocationMatch "^/+res/adm/pages/[^/]+\.(gif|png)$">
 PerlAuthenHandler	'sub { return OK }' 
@@ -663,6 +669,18 @@ SetHandler perl-script
 PerlHandler Apache::migrateuser
 </Location>
 
+<Location /adm/sso>
+  <IfModule mod_shib>
+    AuthType shibboleth
+    ShibUseEnvironment On
+    ShibRequestSetting requireSession 1
+    ShibRequestSetting redirectToSSL 443
+    require valid-user
+    PerlAuthzHandler       Apache::lonshibacc
+    PerlAuthzHandler       Apache::lonacc
+  </IfModule>
+</Location>
+
 <Location /adm/annotations>
 AuthType LONCAPA
 Require valid-user