The RequestMap is a ServiceProviderPlugIn that performs the task of returning content and AccessControl settings to the ServiceProvider software during request processing so that the filter knows how to behave and what rules to enforce.
Every request into a Shibboleth-enabled web server is fed into the RequestMap plugin, making it a potential bottleneck that must be implemented as efficiently as possible.
In ShibOnedotThree, the following implementation types are supplied:
$ edu.internet2.middleware.shibboleth.sp.provider.NativeRequestMapProvider: Web-server-specific plugin that allows native commands (like Apache's =ShibRequireSession=) to override or supplement the XML syntax. The Apache version also supplies an .htaccess authorization plugin.
$ edu.internet2.middleware.shibboleth.sp.provider.XMLRequestMapProvider: Portable plugin that does not support the Apache-specific commands and works the same on all web platforms. This plugin does NOT support .htaccess files for authorization unless you also place an
<htaccess/> element somewhere in the RequestMap tree.