The following three URLs should be accessible without needing to provide a password.

Your metadata:

https://<your host>/sp-metadata.xml

Shibboleth's details on the current SSO status:

https://<your host>/Shibboleth.sso/Status

Shibboleths's details on the current SSO session:

https://<your host>/Shibboleth.sso/Session

SHRINE application: This URL is password-protected by Shibboleth. You will be redirected to the idP's login form; and upon successful login, back to the shrine application.

https://<your host>/shrine-api/shrine-webclient