diff --git a/include/integrations/saml/certs/.htaccess b/include/integrations/saml/certs/.htaccess
new file mode 100644
index 0000000000..61acb983a0
--- /dev/null
+++ b/include/integrations/saml/certs/.htaccess
@@ -0,0 +1,7 @@
+<ifModule mod_authz_core.c>
+Require all denied
+</ifModule>
+
+<IfModule !mod_authz_core.c>
+Deny from all
+</ifModule>