diff --git a/docs/.vuepress/public/pomerium-auth-flow.svg b/docs/.vuepress/public/pomerium-auth-flow.svg
new file mode 100644
index 000000000..b79698564
--- /dev/null
+++ b/docs/.vuepress/public/pomerium-auth-flow.svg
@@ -0,0 +1,3 @@
+
+
+
\ No newline at end of file
diff --git a/docs/docs/readme.md b/docs/docs/readme.md
index 143592302..7f21900fb 100644
--- a/docs/docs/readme.md
+++ b/docs/docs/readme.md
@@ -51,6 +51,17 @@ In test deployments, all three components may run from a single binary and confi
+### Authentication Flow
+
+Pomerium's internal and external component interactions during full authentication from a fresh user are diagramed below.
+
+After initial authentication to provide a session token, only the authorization interactions occur.
+
+
+
+
+
+
## In action
To make this a bit more concrete, see the following short video which demonstrates: