Authentication & SSO
How Orbit signs users in from Nucleus, the token model, and roles.
Orbit and Nucleus share a token-compatible authentication model. Opening Orbit from Nucleus mints a secure token that carries the user’s identity, role, and school, so there’s no second login.
- JWT-based, signed and short-lived.
- Roles map across products (e.g. a Nucleus employee resolves to the right Orbit role).
- Students/teachers/admins each land on their correct home.
/mobile page handles direct sign-in and account creation.











