I figured it out. I had to add RequestHeader set REMOTE_USER expr=%{REMOTE_USER} to my apache config and now SSO works.