virtual host with and without Mellon

[vieridipaola]

Hi,

I was expecting I could serve the root location with Mellon auth and another specific location without.

For instance, I'd have:

https://FQDN/ -> redirect to IdP for Auth with Mellon

https://FQDN/noSSO -> no redirection to IdP, just plain open access (no auth)

Is this possible?

The following Apache config example doesn't seem to do this (it redirects to the IdP for auth even for https://FQDN/noSSO):

<VirtualHost *:443>
        ServerName FQDN
        ProxyRequests Off
        ProxyPreserveHost On

        MellonDiagnosticsEnable On
        MellonDiagnosticsFile MellonDiagnosticsIntranet
 
        <Location /noSSO>
            MellonEnable "off"
            ProxyPass https://backend1/
            ProxyPassReverse https://backend1/
            Require all granted
        </Location>

        <Location />
            AuthType "Mellon"
            Require valid-user
            MellonEnable "auth"
            MellonVariable "myfrontend"
            MellonSecureCookie On
            # MellonCookieSameSite None
            MellonEndpointPath "/myfrontend/endpoint"
            MellonIdPMetadataFile "/etc/apache2/mellon/fed-idp.xml"
            MellonSPPrivateKeyFile /etc/ssl/apache2/server.key
            MellonSPCertFile /etc/ssl/apache2/server.crt
            MellonSPentityId "myfrontend"
            MellonSessionIdleTimeout 43200
            MellonSessionLength 43200
            MellonMergeEnvVars On
            MellonUser "urn:oid:2.5.4.3"
            MellonOrganizationName "My Org"

            ProxyPass https://backend2/
            ProxyPassReverse https://backend2/

            Require all granted

        </Location>

        <Location /myfrontend/endpoint/>
            AuthType "Mellon"
            MellonEnable "off"
            Require all granted
        </Location>

etc.

So how do I (can I) avoid using Mellon auth for https://FQDN/noSSO in the example above?

Thanks!