...
<Location /myprotectedSP> AuthType shibboleth ShibRequestSetting requireSession 1 Require valid-user</Location> |
If the entire site should be protected, you write <Location /> instead of "Location <Location /myprotectedSPmyprotectedSP>"
Handling logins by the Service/Application protected by Shibboleth
...