LoadModule lookup_identity_module modules/mod_lookup_identity.so

<LocationMatch ^/application/login>
LookupUserAttr mail REMOTE_USER_EMAIL " "
LookupUserAttr givenname REMOTE_USER_FIRSTNAME
LookupUserAttr sn REMOTE_USER_LASTNAME
LookupUserGroups REMOTE_USER_GROUPS ":"
LookupUserGroupsIter REMOTE_USER_GROUP

RequestHeader unset REMOTE-USER-EMAIL
RequestHeader unset REMOTE-USER-FIRSTNAME
RequestHeader unset REMOTE-USER-LASTNAME
RequestHeader unset REMOTE-USER-GECOS
RequestHeader unset REMOTE-USER-GROUPS

RequestHeader unset REMOTE-USER-GROUP-N
RequestHeader unset REMOTE-USER-GROUP-1
RequestHeader unset REMOTE-USER-GROUP-2
RequestHeader unset REMOTE-USER-GROUP-3

RequestHeader set REMOTE-USER-EMAIL %{REMOTE_USER_EMAIL}e env=REMOTE_USER_EMAIL
RequestHeader set REMOTE-USER-FIRSTNAME %{REMOTE_USER_FIRSTNAME}e env=REMOTE_USER_FIRSTNAME
RequestHeader set REMOTE-USER-LASTNAME %{REMOTE_USER_LASTNAME}e env=REMOTE_USER_LASTNAME
RequestHeader set REMOTE-USER-GECOS %{REMOTE_USER_GECOS}e env=REMOTE_USER_GECOS
RequestHeader set REMOTE-USER-GROUPS %{REMOTE_USER_GROUPS}e env=REMOTE_USER_GROUPS

RequestHeader set REMOTE-USER-GROUP-N %{REMOTE_USER_GROUP_N}e env=REMOTE_USER_GROUP_N
RequestHeader set REMOTE-USER-GROUP-1 %{REMOTE_USER_GROUP_1}e env=REMOTE_USER_GROUP_1
RequestHeader set REMOTE-USER-GROUP-2 %{REMOTE_USER_GROUP_2}e env=REMOTE_USER_GROUP_2
RequestHeader set REMOTE-USER-GROUP-3 %{REMOTE_USER_GROUP_3}e env=REMOTE_USER_GROUP_3
</LocationMatch>