Security patch CS466318, web app config and SSO

Just a note for all when applying the security patch for CS466318. We are using SSO and have made the indicates changes to our web app as directed for Shibboleth. I had not realized that this patch rebuilds the HTTPServer configuration so some of my manual SSO changes were reverted.

In particular, addition of “JkMount /Windchill/sso/* ajpWorker” to conf.d/30-app-Windchill-AJP.conf was wiped. This is documented here: https://www.ptc.com/en/support/article/CS394860?source=search where you fail to get back to Windchill from the redirect session hook. 

The requested URL was not found on this server

The right solution should (I feel) is to add this like to the main template file that builds the conf file. This is documented here: https://www.ptc.com/en/support/article/CS394860?source=search. A but more complicated but I think safer from a reconfig perspective. 

Now, if anyone knows what templates need to update to change AuthType and ShibRequestSetting in the Auth conf file so that reconfig does that too, that would be helpful.  I will post if I find it first.