title: Apache Config - Exclude Location from Authentication
body: <p>I have a web application that is being protected by a Shibboleth authentication module. My current config is as below</p>
  
  <pre><code>&lt;Location /MyApp&gt;
   AuthType shibboleth
   ShibUseHeaders On
   ShibRequestSetting requireSession 1
   require shibboleth
  &lt;/Location&gt;
  </code></pre>
  
  <p>The <strong>shibboleth</strong> is an authentication module that provides SSO capability and the current flow directs the user to an <em>Identity Provider</em> for the user to enter the login credentials. I want to be able to open up a specific URL so that the URL gets bypassed by the authentication module. I tried the below but it doesn't seem to work and I get a blank page on loading the URL</p>
  
  <p><em>Method 1</em></p>
  
  <pre><code>&lt;Location /MyApp/Login.html&gt;
    Satisfy Any
    Allow from all
    AuthType None
    Require all granted
  &lt;/Location&gt;
  </code></pre>
  
  <p><em>Method 2</em></p>
  
  <pre><code>&lt;Location /MyApp/Login.html&gt;
    AuthType shibboleth
    ShibRequestSetting requireSession 0
    require shibboleth
  &lt;/Location&gt;
  </code></pre>
  
  <p>I did some additional debugging and it appears that the problem is with additional files the <strong>Login.html</strong> loads - such as css, js etc. What is the correct way to configure this in Apache so that the Login.html can be bypassed from the authentication</p>
  
  <p>Thanks</p>