👁 Image
Biss.Authentication.Service.ExternalProviders 10.4.5

Biss.Authentication.Service.ExternalProviders

© 2026 FOTEC Forschungs- und Technologietransfer GmbH | https://www.fotec.at

What can this NuGet package do?

Biss.Authentication.Service.ExternalProviders delivers server-side infrastructure for integrating external OAuth providers into BISS ConnectivityHost backends. This package provides the base abstraction layer for validating OAuth tokens from providers like Microsoft Entra ID, Google, and Lanet, mapping external user identities to BISS user accounts, and handling token exchange flows. It includes middleware for OAuth redirect endpoints (used by Blazor clients), token validation services, and user provisioning hooks. The package enables unified authentication across multiple identity providers while maintaining a single user database.

What are the core features?

• Provider Abstraction - Generic interfaces for OAuth token validation enabling easy integration of new identity providers • Token Validation - Server-side validation of OAuth access tokens and ID tokens from external providers using Microsoft.IdentityModel • User Mapping - Automatic mapping of external provider user identities to BISS user accounts with claim transformation • OAuth Endpoints - ASP.NET Core middleware for OAuth redirect flows used by Blazor applications • Token Exchange - Exchange external OAuth tokens for BISS JWT tokens with proper claim mapping and permissions • User Provisioning - Hooks for creating or linking user accounts during first-time OAuth login • Provider Registration - Service collection extensions for registering multiple providers with dependency injection • Configuration Models - Type-safe configuration for provider endpoints, client secrets, and validation parameters

Dependencies

BISS Packages

NuGet Packages