Partner Integration Overview

Francoflex provides multiple ways for partners to authenticate their users seamlessly. Choose the approach that best fits your technical requirements and user experience goals.

Integration Options

Method	Best For	Complexity
Signed URLs	Simple "Go to Francoflex" buttons. No server-side token generation needed.	Low
Magic Links	Server-side token generation with single-use secure links.	Medium
Enterprise SSO	Deep integration with your Identity Provider (Keycloak, Okta, Azure AD).	High

Choosing Your Path

Simple Authentication (Signed URLs & Magic Links)

If you already have users logged into your system and simply want to provide a button like "Go to French Training", these methods are the easiest:

• Signed URLs: Generate links client-side or server-side using a shared secret. No API calls needed.
• Magic Links: Request single-use tokens from our API, then redirect users.

Both are stateless and don't require managing an Identity Provider.

Enterprise SSO (Token Exchange)

Best for large organizations that want to manage all permissions through their central Identity Provider:

• Centralized: Uses your existing Keycloak, Azure AD, or Okta.
• Automated: Can synchronize groups and roles automatically.
• Standardized: Based on OpenID Connect (OIDC) standards.

High-Level Flow

graph TD
    subgraph "Partner Environment"
        A[User in Partner App]
    end

    subgraph "Integration Choice"
        A -->|Simple| B(Signed URLs / Magic Links)
        A -->|Enterprise| C(SSO Token Exchange)
    end

    subgraph "Francoflex"
        B --> D[Authenticated Session]
        C --> D
        D --> E[Redirect to Dashboard/Content]
    end

Getting Started

1. Contact us to receive your Partner credentials (API key or shared secret)
2. Choose your integration method based on your requirements
3. Follow the implementation guide for your chosen method