Step 3, Set up authentication keys

Add authentication keys to the project

This topic discusses how to add authentication keys to the project, which means the keys don’t have to be stored in the Git repository. (Developers who need to update Magento dependencies or to install extension need authentication keys locally; this is discussed in the next section.)

Only a project administrator can perform this task. The project administrator must have the public and private authentication keys for Magento Enterprise Cloud Edition. You should contact the Magento Enterprise Cloud Edition account owner to get the keys.

To set up authentication keys in the project:

  1. Log in to your Magento Enterprise Cloud Edition account at
  2. If necessary, click the Projects tab.
  3. Click the name of your project.
  4. In the upper left corner of the page, next to the project name, click Configure Project button (Configure Project) as the following figure shows.

    Configure your project

  5. In the middle pane, click the Variables tab as the following figure shows.

    Add a project variable

  6. Click Add Variable.
  7. In the Name field, enter env:COMPOSER_AUTH.
  8. In the Value field, enter the following, replacing the sample values with your authentication keys.

       "http-basic": {
          "": {
             "username": "<public key>",
             "password": "<private key>"
  9. Select the Visible during build check box. Clear the other check boxes.

    The following figure shows an example.

    Set up authentication keys as project variables

  10. Click Add Variable.
  11. Remove auth.json from the Git repository from every environment currently configured for the project.

    Use the following command to list currently configured environments:

    magento-cloud environment:list

    For every environment ID, check out the environment and delete auth.json as follows:

    magento-cloud environment:checkout <environment ID>
    git rm auth.json
    git add -A && git commit -m "Remove auth.json" && git push origin <branch name>
  12. Wait for the project to build and deploy.

Add your local authentication keys to the project

Before you can upgrade the Magento software or install extensions, you must have authentication keys in the auth.json file in the Magento root directory. However, the authentication keys don’t need to be in the Git repository so you can add auth.json to .gitignore.

Make sure your project administrator has added authentication keys to the project as discussed in the preceding section. Typically, either the project administrator or the account owner has the authentication keys. Contact one of them before you continue.

To add your authentication keys:

  1. If you haven’t done so already, log in to your Magento Enterprise Cloud Edition project, check out an environment, and pull updated code from the server.

    Use the following commands:

    magento-cloud login
    magento-cloud environment:list
    magento-cloud environment:checkout <env ID>
    git pull origin <branch name>
  2. Create a file named auth.json in the Magento project root directory and add your authentication keys to it.

    If you have an auth.json file already, contact your project administrator to make sure a project variable has been defined. If there is no project variable that defines authentication keys, skip this step and continue with Step 7: Set file system permissions and ownership.

    A sample auth.json follows. Replace the same values with your keys.

       "http-basic": {
          "": {
             "username": "<your public key>",
             "password": "<your private key>"
  3. Save your changes to auth.json and exit the text editor.
  4. Open .gitignore in a text editor.
  5. Add auth.json to it anywhere.

    A snippet from .gitignore follows:

  6. Save your changes to .gitignore and exit the text editor.

Next step

Step 6, Set file system permissions and ownership