diff --git a/roles/_meta/deploy-simplesamlphp/README.md b/roles/_meta/deploy-simplesamlphp/README.md
new file mode 100644
index 00000000..3d82e671
--- /dev/null
+++ b/roles/_meta/deploy-simplesamlphp/README.md
@@ -0,0 +1,9 @@
+# SimpleSAMLphp
+Role for deploying single SimpleSAMLphp instances. Do not use if you are deploying SimpleSAMLphp with another application like Drupal via composer.
+
+This role currently assumes all config is in the repository alongside composer.json and the special `SIMPLESAMLPHP_CONFIG_DIR` variable is passed in via the web server vhost to tell SimpleSAMLphp where the config is on the server. For vhost configuration in Nginx see ce-provision:
+
+* https://github.com/codeenigma/ce-provision/blob/1.x/roles/nginx
+
+<!--ROLEVARS-->
+<!--ENDROLEVARS-->
diff --git a/roles/_meta/deploy-simplesamlphp/tasks/main.yml b/roles/_meta/deploy-simplesamlphp/tasks/main.yml
new file mode 100644
index 00000000..7af28fa2
--- /dev/null
+++ b/roles/_meta/deploy-simplesamlphp/tasks/main.yml
@@ -0,0 +1,17 @@
+---
+# Default SimpleSAMLphp role. This is suitable for a standalone SimpleSAMLphp installation
+
+- ansible.builtin.import_role:
+    name: _init
+- ansible.builtin.import_role:
+    name: deploy_code
+- ansible.builtin.import_role:
+    name: composer
+- ansible.builtin.import_role:
+    name: database_backup
+- ansible.builtin.import_role:
+    name: live_symlink
+- ansible.builtin.import_role:
+    name: cache_clear/cache_clear-opcache
+- ansible.builtin.import_role:
+    name: _exit
diff --git a/roles/deploy_code/deploy_code-simplesamlphp/tasks/main.yml b/roles/deploy_code/deploy_code-simplesamlphp/tasks/main.yml
new file mode 100644
index 00000000..03c03856
--- /dev/null
+++ b/roles/deploy_code/deploy_code-simplesamlphp/tasks/main.yml
@@ -0,0 +1 @@
+# Nothing to do.
\ No newline at end of file