Setting up SimpleSAMLphp with BLT


Acquia will end support for BLT on December 31, 2024. For more information on how to replace your BLT implementation with updated functionality, see You don’t need BLT on Acquia Cloud.

Use the following information to set up single sign-on (SSO) with SimpleSAMLphp on a working BLT website.

BLT provides commands for automating the setup process for SimpleSAMLphp and assists in deploying configuration files to Cloud Platform. You must already be familiar with the process of configuring SimpleSAMLphp as described in the instructions for using SimpleSAMLphp on Cloud Platform.

BLT doesn’t offer support for issues related to SimpleSAMLphp architecture, configuration, or implementation. Direct SimpleSAMLphp support requests to Acquia Support or your Technical Account Manager.

From BLT 12.x, the SimpleSAMLphp capabilities are separated out into a BLT Plugin. Therefore, you must first add this plugin to your codebase by running the following command:

composer require acquia/blt-simplesamlphp

Before proceeding, prepare your SimpleSAMLphp configuration by completing the following tasks:

  1. Run the following command to perform initial installation tasks:

    blt recipes:simplesamlphp:init

    Tasks completed by the initialization command include the following:

    • Adds the simpleSAMLphp Authentication module as a project dependency in your composer.json file.

    • Copies configuration files to ${project.root}/simplesamlphp/config.

    • Adds a simplesamlphp property to the blt/blt.yml file, which instructs BLT to include your SimpleSAMLphp configuration during deployments to Cloud Platform.

    • Creates a symbolic link in the docroot to the web-accessible directory of the simplesamlphp library.

  2. Follow the instructions for using SimpleSAMLphp on Cloud Platform to update the configuration files located in the ${project.root}/simplesamlphp/config directory.

  3. Run the following command to copy the configuration files to the local SimpleSAML library:

    blt source:build:simplesamlphp-config


    The source:build:simplesamlphp-config command is strictly for local use, and because the command overwrites vendor files, running the command will make not make any changes that are visible to Git.

SimpleSAMLphp should now be ready for testing in your local environment. When you are ready to test in a Cloud Platform environment, commit your configuration files and deploy a build artifact as usual using blt artifact:deploy or one of BLT’s supported continuous integration services. BLT will add and commit your configuration files when building a deploy artifact.