...
Note: SELinux must be set to permissive mode in order for the SP to function properly; otherwise (without modifying policy) its Apache module will be unable to connect to the shibd's Unix socket (which lives in /var/run/shibboleth/). Edit /etc/selinux/config accordingly.