Relevant shibboleth.xml settings:

<Host name="illiadtest-sm.umd.edu" scheme="http" port="80" applicationId="SM" requireSession="true" exportAssertion="true">
    <Path name="includes" applicationId="SM" requireSession="false" exportAssertion="false"/>
    <Path name="lending" applicationId="SM" requireSession="false" exportAssertion="false"/>
    <Path name="logout" applicationId="SM" requireSession="false" exportAssertion="false"/>
    <Path name="webreports" applicationId="SM" requireSession="false" exportAssertion="false"/>
</Host>

In the above settings, includes, lending, logout, and webreports are not forced through Shibboleth authn, while everything else is

includes is a campus specific directory on our shared instance of ILLiad, so is not necessary in most configurations.