Client Cert AuthN Filter edu.internet2.middleware.shibboleth.utils.ClientCertTrustFilter regex .*CN=([^,/]+).* matchGroup 1 Client Cert AuthN Filter /SSO IdPConfigFile $SHIB_HOME$/etc/idp.xml IdP Shibboleth Identity Provider edu.internet2.middleware.shibboleth.idp.IdPResponder IdP /SSO IdP /AA IdP /Artifact css text/css