...
Here is an example of the Shibboleth handler settings section (in the General settings tab) for the authentication module when used at MIT, for the host name ist-dev.mit.edu. Click on the image to enlarge it.
A typical attribute settings section (in the General settings Tab) is shown below. Click on the image to enlarge it.
...
If your application is intended to only be accessible to users that have an MIT Kerberos username then you should specify the MIT IdP entityID (https://idp-mit-edu.ezproxyberklee.flo.org/shibboleth) as a property of the SSO/SessionInitiator. For a 
SessionInitiator, an example of this, using the /Login location, is:
...