This AccessControl plugin is supplied and installed by
mod_shib, the SP Apache module. As long as the
<RequestMapProvider> type is
edu.internet2.middleware.shibboleth.sp.provider.NativeRequestMapProvider, this plugin is automatically enabled for all requests on Apache.
It supports an access control syntax derived from Apache .htaccess file syntax, which relies primarily on the Require command. Rules are created by specifying the Alias of an attribute established by the SP's AttributeAcceptancePolicy and the possible values (or regular expressions if the alias is followed by the ~ symbol) to match.
ShibRequireAll command means that all rules must successfully apply, unlike Apache's usual practice of granting access if any requirement is met.
See Also: SPProtectionConfig#Apache