flowchart TB S1["1 · User opens the District Overview Dashboard URL
lane: User / Browser"]:::user S2["2 · Browser redirects to the district's Identity Provider
SAML or OIDC, district's choice"]:::idp S3["3 · User authenticates once
existing school credentials"]:::idp S4["4 · Identity Provider returns a signed assertion / token"]:::idp S5["5 · Browser presents the token to the Admin API"]:::user S6["6 · Admin API validates token, resolves Role (District Admin), checks RBAC, returns report"]:::api S1 --> S2 --> S3 --> S4 --> S5 --> S6 classDef user fill:#37474f,stroke:#1c2529,color:#fff,font-size:12px classDef idp fill:#3d7fc1,stroke:#2a5c91,color:#fff,font-size:12px classDef api fill:#2a9d8f,stroke:#1f7a6f,color:#fff,font-size:12px linkStyle default stroke:#999,stroke-width:2px