mod_auth_mellon.conf

ServerName https://{{HOST}}
SetEnv HTTPS

<Location / >
 MellonEnable info
 MellonEndpointPath /mellon
 MellonSPPrivateKeyFile /etc/apache2/saml2/sp.key
 MellonSPCertFile       /etc/apache2/saml2/sp.cert
 MellonSPMetadataFile   /etc/apache2/saml2/sp.xml
 MellonIdPMetadataFile  /etc/apache2/saml2/idp.xml
 MellonSignatureMethod rsa-sha256
 MellonUser username
</Location>

<Location /admin >
 AuthType Mellon
 MellonEnable auth
 Require valid-user
</Location>