Session Switching (Multi-Account Users)

Purpose  - Lets a person who has more than one linked account move between them without logging out and back in. 

Who Can Use It 

• Employees who administer one or more schools. 
• School Admins who want to open their own employee dashboard. 
• Students who share credentials with siblings and need to pick which student account to use. 

Key Capabilities 

• Switch School Session: from a School Admin session, switch into another school the same employee administers. 
• Switch to Employee Session: from a School Admin session, switch into the employee's own dashboard. 
• Get Employee Admin Schools: list all schools the logged-in employee is authorized to administer. 
• Switch to School Session: from an employee session, jump into a school the employee is authorized to administer. 
• Get Student Sibling Accounts: list all student accounts sharing the same email or phone as the logged-in student. 
• Switch Student Session: change the active student account to a sibling account.  

How It Works

• A short-lived access token is issued for the target account, carrying the original operator as "managedBy". 
• Before issuing the token, the system verifies the operator is authorized for the target account and that the target is active and has finished onboarding. 
• The new token is returned; the user's session moves to the target account. 

Rules & Restrictions 

• Only schools where the employee is an administrator (via admin mapping or admin designation) are switchable. 
• Only students that share the same login (email or phone) are treated as siblings. Deleted or archived target accounts are refused. 
• Target accounts whose registration is not confirmed are refused. 
• Audit fields for actions after a switch record the underlying operator (the employee) rather than the target school user.