diff --git a/docs/simplesamlphp-install.md b/docs/simplesamlphp-install.md
index 5e3c8c33900cda98269a7e8919f85b5c937c8c2c..254ab66d8a6e301ad84de379d675955edd2cc40d 100644
--- a/docs/simplesamlphp-install.md
+++ b/docs/simplesamlphp-install.md
@@ -119,6 +119,18 @@ Find the Apache configuration file for the virtual hosts where you want to run S
             SetEnv SIMPLESAMLPHP_CONFIG_DIR /var/simplesamlphp/config
 
             Alias /simplesaml /var/simplesamlphp/www
+
+            <Directory /var/simplesamlphp/www>
+                <IfModule !mod_authz_core.c>
+                # For Apache 2.2:
+                Order allow,deny
+                Allow from all
+                </IfModule>
+                <IfModule mod_authz_core.c>
+                # For Apache 2.4:
+                Require all granted
+                </IfModule>
+            </Directory>
     </VirtualHost>
 
 Note the `Alias` directive, which gives control to SimpleSAMLphp for all urls matching `http(s)://service.example.com/simplesaml/*`. SimpleSAMLphp makes several SAML interfaces available on the web; all of them are included in the `www` subdirectory of your SimpleSAMLphp installation. You can name the alias whatever you want, but the name must be specified in the `config.php` file of simpleSAML as described in [the section called “SimpleSAMLphp configuration: config.php”](#sect.config "SimpleSAMLphp configuration: config.php"). Here is an example of how this configuration may look like in `config.php`: