🛡

Guardian SSO setup

Install Guardian
in minutes

The setup wizard detects your existing configuration, skips completed steps, and writes sso.env and .htaccess for you.

System

Database

Config

Web Server

Admin

Done

Step 01 / 06

System Requirements

Checking your server environment. Steps that are already complete will be automatically skipped.

○

PHP ≥ 8.1

—

○

PDO MySQL

—

○

Sodium (encryption)

—

○

OpenSSL

—

○

mbstring

—

○

Storage directories writable

—

Step 02 / 06

Database

MySQL connection details. The wizard creates the database and imports the schema automatically.

⤼ Database credentials already detected in sso.env. Skip this step or update below.

Connection

Host

Port

Database name

Username

Password Create a dedicated user: CREATE USER 'guardian'@'localhost' IDENTIFIED BY 'pw'; GRANT ALL ON guardian_sso.* TO 'guardian'@'localhost';

Step 03 / 06

Configuration

Set your application URL and optional mail server. JWT secrets and encryption keys are generated automatically with random_bytes(32) and written to sso.env.

⤼ Configuration already present in sso.env. Skip or update below.

Application

Application URL Full URL without trailing slash. Used for SSO callbacks and email links.

Mail (optional)

SMTP Host

Port

SMTP User

SMTP Password

From Address

Encryption

Send test email to

🔑 JWT_SECRET and ENCRYPTION_KEY will be auto-generated and written to sso.env

Step 04 / 06

Web Server

Write .htaccess to enable clean URL routing — paths like /auth/login and /admin/dashboard instead of query strings.

⤼ .htaccess already exists in the app directory. Skip or regenerate.

Server type

Web server

For Nginx, add this to your server {} block:

location / {
    try_files $uri $uri/ /index.php?$query_string;
}
location ~ \.php$ {
    fastcgi_pass unix:/run/php/php8.3-fpm.sock;
    fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
    include fastcgi_params;
}

Step 05 / 06

Admin Account

Create the superadmin account. Replaces the default seed credentials with your own.

Full name

Email address

Password

Confirm password

✓

Guardian SSO is ready!

Your enterprise identity platform is installed and configured.

—

Password

As set in step 5

⚠

The setup wizard is automatically disabled once sso.env is fully configured. No files need to be deleted.

Admin dashboard →

Install Guardianin minutes

System Requirements

Database

Configuration

Web Server

Admin Account

Guardian SSO is ready!

Install Guardian
in minutes