diff --git a/global/overlay/etc/puppet/modules/soc/templates/intelmq/intelmq-vhost.conf.erb b/global/overlay/etc/puppet/modules/soc/templates/intelmq/intelmq-vhost.conf.erb
index 1a27a9b..11738b7 100644
--- a/global/overlay/etc/puppet/modules/soc/templates/intelmq/intelmq-vhost.conf.erb
+++ b/global/overlay/etc/puppet/modules/soc/templates/intelmq/intelmq-vhost.conf.erb
@@ -69,6 +69,20 @@
 
         Alias /intelmq-manager /opt/intelmq/www/intelmq-manager
         <Directory /opt/intelmq/www/intelmq-manager> 
+        <IfModule mod_shib.c>
+          <Location />
+            AuthType shibboleth
+            ShibRequestSetting requireSession On
+            ShibUseHeaders On
+
+            AuthGroupFile /etc/apache2/groups.txt
+            Require group <%= @apache_group %>
+          </Location>
+        </IfModule>
+        <IfModule !mod_shib.c>
+          Require all granted
+        </IfModule>
+
             <IfModule mod_headers.c>
                     Header set Content-Security-Policy "script-src 'self'"
                     Header set X-Content-Security-Policy "script-src 'self'"