Register the Salesforce org in Zuora Domain Manager
Register your Salesforce org in Zuora Domain Manager so Zuora Experiences can verify signed requests from Salesforce and securely render the experience.
In Salesforce Setup, open Company Information and copy the 15-character Organization ID, which starts with 00D.
In Zuora Experiences Domain Settings > Salesforce, create a Salesforce connection by using the Organization ID and Consumer Secret.
The endpoint for the Salesforce connection is the hosting domain that you configured for the experience. Salesforce sends signed requests to this endpoint when the Lightning component loads.
This registration allows Zuora Experiences to verify signed requests from your Salesforce org. When the Lightning component loads, Salesforce sends a signed POST request to the configured Canvas App URL. Zuora validates the request by using the shared consumer secret before rendering the experience.