You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: readme/simplesamlphp-setup.md
+37-19
Original file line number
Diff line number
Diff line change
@@ -1,24 +1,33 @@
1
-
# SimpleSAMLphp Setup
1
+
# SimpleSAMLphp using BLT
2
2
3
-
To configure SimpleSAMLphp, perform the following steps after initially setting up BLT:
3
+
To configure SimpleSAMLphp with BLT perform the following steps after initially setting up BLT:
4
4
5
-
1. Execute `blt simplesamlphp:init`. This performs the following initial setup tasks:
5
+
#### <iclass="icon-code"></i> BLT Basic Setup
6
+
Execute `blt simplesamlphp:init`. This performs the following initial setup tasks:
6
7
7
-
* Adds the `simplesamlphp_auth` module as a project dependency.
8
+
* Adds the `simplesamlphp_auth` module as a project dependency in your `composer.json` file.
8
9
* Copies configuration files to `${project.root}/simplesamlphp`.
9
10
* Adds a `simplesamlphp` property to `project.yml`.
10
11
* Creates a symbolic link in the docroot to the web accessible directory of the `simplesamlphp` library.
11
12
12
-
1. Add the following two lines to `docroot/.htaccess`:
13
+
> **Note:**
14
+
15
+
> - The `simplesamlphp_auth` module contains a `composer.json` file where you can find the version (`~1.14.4`) of the SimpleSamlPHP library that will be installed.
16
+
> - As part of `blt simplesamlphp:init` BLT creates a `config` directory that contains three important files: `config.php`, `acquia_config.php` and `authsources.php`.
17
+
18
+
#### <iclass="icon-pencil"></i> Basic Config
19
+
20
+
- Add the following two lines to `docroot/.htaccess`:
13
21
14
22
```
15
23
# Allow access to simplesaml paths.
16
24
RewriteCond %{REQUEST_URI} !^/simplesaml
17
25
```
18
26
19
-
...for example, as depicted in the "diff" below:
27
+
> **Note:**
20
28
21
-
```
29
+
> For example, as depicted in the "diff" below:
30
+
> ```
22
31
# Copy and adapt this rule to directly execute PHP files in contributed or
23
32
# custom modules or to run another PHP application in the same directory.
@@ -28,7 +37,7 @@ To configure SimpleSAMLphp, perform the following steps after initially setting
28
37
RewriteRule "^.+/.*\.php$" - [F]
29
38
```
30
39
31
-
1. Edit `${project.root}/simplesamlphp/config/acquia_config.php` as follows:
40
+
- Edit `${project.root}/simplesamlphp/config/acquia_config.php` as follows:
32
41
33
42
* Update your database name in `$ah_options`:
34
43
@@ -63,19 +72,25 @@ To configure SimpleSAMLphp, perform the following steps after initially setting
63
72
$config['admin.protectmetadata'] = true;
64
73
```
65
74
66
-
1. Edit `${project.root}/simplesamlphp/config/authsources.php` as described in [SimpleSAMLphp Service Provider QuickStart](https://simplesamlphp.org/docs/stable/simplesamlphp-sp) (except enabling a certificate for your service provider, which should be done according to the instructions below).
75
+
> **Note:**
67
76
68
-
1. If your Identity Provider/Federation requires that your Service Providers hold a certificate...
77
+
> - The file `acquia_config.php` is created in the first step i.e. Basic Setup and the file `config.php` must contain a line `include 'acquia_config.php'` that includes that particular file.
69
78
70
-
1. Create a self-signed certificate in the `${project.root}/simplesamlphp/cert` directory:
79
+
- Edit `${project.root}/simplesamlphp/config/authsources.php` as described in [SimpleSAMLphp Service Provider QuickStart](https://simplesamlphp.org/docs/stable/simplesamlphp-sp) (except enabling a certificate for your service provider, which should be done according to the instructions below).
71
80
72
-
```
81
+
- Edit `${project.root}/simplesamlphp/metadata/saml20-idp-remote.php` as described in [IdP remote metadata reference](https://simplesamlphp.org/docs/stable/simplesamlphp-reference-idp-remote).
82
+
83
+
#### <i class="icon-pencil"></i> Optional Config
84
+
85
+
If your Identity Provider/Federation requires that your Service Providers hold a certificate.
86
+
87
+
1. Create a self-signed certificate in the `${project.root}/simplesamlphp/cert` directory:
1. Edit your `${project.root}/simplesamlphp/config/authsources.php` entry, and add references to your certificate:
78
-
92
+
93
+
2. Edit your `${project.root}/simplesamlphp/config/authsources.php` entry, and add references to your certificate:
79
94
```
80
95
'default-sp' => array(
81
96
'saml:SP',
@@ -85,10 +100,13 @@ To configure SimpleSAMLphp, perform the following steps after initially setting
85
100
),
86
101
```
87
102
88
-
1. Review `${project.root}/simplesamlphp/config/config.php` and set any values called for by your project requirements.
103
+
#### <i class="icon-check"></i> Check Config
104
+
105
+
Review `${project.root}/simplesamlphp/config/config.php` and set any values called for by your project requirements.
89
106
90
-
1. Edit `${project.root}/simplesamlphp/metadata/saml20-idp-remote.php` as described in [IdP remote metadata reference](https://simplesamlphp.org/docs/stable/simplesamlphp-reference-idp-remote).
107
+
#### <i class="icon-code"></i> BLT Copy Config
91
108
92
-
1. Execute `blt simplesamlphp:config:build` to copy these configuration files to the SimpleSAMLphp library.
109
+
Execute `blt simplesamlphp:config:build` to copy these configuration files to the SimpleSAMLphp library.
0 commit comments