Franz.Common.SSO 2.2.16

Franz.Common.SSO

A library within the Franz Framework that provides streamlined support for Single Sign-On (SSO) in ASP.NET Core applications. This package unifies configuration and registration of multiple SSO providers into a single, consistent bootstrapping mechanism, while normalizing all claims into a unified FranzIdentityContext.

-Current Version: v2.2.16

Features

• Centralized SSO Bootstrapping

  • One entry point: AddFranzSsoIdentity(configuration)
  • Loads provider settings directly from appsettings.json
  • Ensures only one interactive provider is active unless explicitly configured

• Supported Providers

  • WS-Federation (Azure AD classic / ADFS)
  • SAML2 (via Sustainsys.Saml2)
  • OpenID Connect (OIDC)
  • Keycloak (via OIDC, with claims transformation)
  • JWT Bearer (API token validation for microservices)

• Claims Normalization

  • Maps provider-specific claims (Azure AD, Keycloak, SAML attributes, etc.)

  • Produces a unified FranzIdentityContext with:

    • UserId, Email, FullName
    • Roles
    • TenantId, DomainId

• Structured Logging

  • Bootstrapping and provider activation logged via ILogger<T>
  • Clean integration with Franz.Common.Logging / Serilog

• Configuration-Driven

  • All providers enabled/disabled via config
  • No hard-coded values in code

Installation

From your private Azure feed:

dotnet nuget add source "https://your-private-feed-url" \
 --name "AzurePrivateFeed" \
 --username "YourAzureUsername" \
 --password "YourAzurePassword" \
 --store-password-in-clear-text
dotnet add package Franz.Common.SSO

Usage

1. Configure appsettings.json

{
 "FranzIdentity": {
 "AllowMultipleInteractiveProviders": false,
 "WsFederation": {
 "Enabled": false,
 "MetadataAddress": "https://login.microsoftonline.com/...",
 "Wtrealm": "https://your-app"
 },
 "Saml2": {
 "Enabled": false,
 "IdpMetadata": "https://idp.example.com/metadata",
 "EntityId": "https://your-app"
 },
 "Oidc": {
 "Enabled": true,
 "Authority": "https://login.microsoftonline.com/{tenantId}/v2.0",
 "ClientId": "your-client-id",
 "ClientSecret": "your-client-secret"
 },
 "Keycloak": {
 "Enabled": false,
 "Authority": "https://keycloak.example.com/realms/yourrealm",
 "ClientId": "your-client-id",
 "ClientSecret": "your-client-secret"
 },
 "Jwt": {
 "Enabled": true,
 "Authority": "https://login.microsoftonline.com/{tenantId}/v2.0",
 "Audience": "api://your-api"
 }
 }
}

2. Register SSO in Program.cs

using Franz.Common.SSO.Extensions;
var builder = WebApplication.CreateBuilder(args);
// Add Franz SSO Identity
builder.Services.AddFranzSsoIdentity(builder.Configuration);
var app = builder.Build();
app.UseAuthentication();
app.UseAuthorization();
app.MapGet("/whoami", (IIdentityContextAccessor accessor) =>
{
 var identity = accessor.GetCurrentIdentity();
 return Results.Json(identity);
});
app.Run();

3. Normalized Identity Usage

var identity = _accessor.GetCurrentIdentity();
Console.WriteLine($"User: {identity.FullName}, Tenant: {identity.TenantId}, Roles: {string.Join(", ", identity.Roles)}");

Integration with Franz Framework

• Works with Franz.Common.Identity for the core identity context.
• Works with Franz.Common.Http.Identity for ASP.NET Core providers.
• Centralizes all SSO wiring into one consistent package.

Changelog

Version 1.6.2

• Complete SSO overhaul

  • Removed legacy GenericSSOManager/GenericSSOProvider
  • Introduced FranzSsoSettings for unified config binding
  • Added AddFranzSsoIdentity() bootstrap extension
  • Integrated WS-Fed, SAML2, OIDC, Keycloak, JWT Bearer providers
  • Added claims normalization pipeline to FranzIdentityContext
  • Added structured startup logging via FranzSsoStartupFilter

Version 1.3

• Upgraded to .NET 9.0.8
• Added new features and improvements
• Separated business concepts from mediator concepts
• Now compatible with both the in-house mediator and MediatR

Version 1.2.65

• Added ISsoProvider for custom SSO provider implementation
• Introduced GenericSSOProvider and GenericSSOManager for generic workflows
• Integrated with ASP.NET Core Identity and EF Core
• Provided SsoServiceRegistration for streamlined configuration

⚡ With v1.6.2, Franz.Common.SSO is now a unified, production-ready SSO abstraction for all supported protocols.

Version 1.6.20

• Updated to .NET 10.0