# Protect everything with Shibboleth authentication
  <Location />
     AuthType shibboleth
     ShibRequireSession On
     require shibboleth
     ShibUseHeaders On
     SSLRequireSSL
     Allow from all
  </Location>

# Redirect authenticated connections from any given campus to the correct campus-specific URL

RewriteCond %{LA-U:ENV:Shib-Identity-Provider} ucop
RewriteRule ^/(.*)$ http://dash-dev.ucop.edu%{REQUEST_URI} [R,QSA,L]

RewriteCond %{ENV:HTTP_SHIB_IDENTITY_PROVIDER} ucop
RewriteCond %{ENV: Shib_Identity_Provider} ucop
RewriteCond %{ENV:SHIB_IDENTITY_PROVIDER} ucop
RewriteCond %{HTTP: Shib_Identity_Provider} ucop
RewriteCond %{HTTP: HTTP_SHIB_IDENTITY_PROVIDER} ucop
RewriteCond %{HTTP: SHIB_IDENTITY_PROVIDER} ucop
RewriteCond %{HTTP_SHIB_IDENTITY_PROVIDER} ucop
RewriteCond %{Shib_Identity_Provider} ucop

128.48.254.43 - - [10/Apr/2014:11:59:39 --0700] [dash-dev.berkeley.edu/sid#6b5b48][rid#d2f150/initial] (4) RewriteCond: input='' pattern='ucop' => not-matched