The file shib_login.php must be protected by Shibboleth, otherwise you cannot use Shibboleth authentication.