Platform Integrations
Auth0 · Tenant Isolation · OneRoster · Google Classroom · Microsoft SDS · Stripe Connect
🏗️ SaaS Architecture
What turns EDLAN into a production-grade multi-school platform
🔐
Auth0 Organizations
Identity
School-by-school identity & access management
Why EDLAN needs this
Each school gets its own Auth0 Organization — a fully isolated identity namespace. Students, teachers, and parents in School A can never touch School B data. SSO with Google/Microsoft, MFA, and custom login pages per school.
Key Capabilities
- One Auth0 Organization per school tenant
- Google Workspace & Microsoft 365 SSO
- Per-school custom login page & branding
- Role-based access with metadata (school_id, role)
- MFA, passwordless, magic links
- Machine-to-machine tokens for API integrations
- Webhooks on login / user creation events
Implementation Snippet
// Auth0 Organization per school
const auth0 = new ManagementClient({ domain, token });
// Create org for new school
await auth0.organizations.create({
name: school.school_code,
display_name: school.school_name,
metadata: { school_id: school.id, plan: 'standard' }
});
// Assign user to org with role
await auth0.organizations.addMembers(orgId, {
members: [userId]
});
await auth0.organizations.addMemberRoles(orgId, userId, {
roles: ['teacher']
});