Skip to navigation
ExtensibilityExperience BuilderExternal authentication with a custom login system

Configure external login settings

View as Markdown

Learn how to provide the tenant settings that Zuora uses to verify users and map their roles.

  • A reachable JWKS URL.
  • The name of the cookie that your login system sets.
  • The location of user roles in the JWT, if your system provides roles
1

Provide the JWKS URL that contains your public key.

2

Choose a cookie name, such as idp_session.

3

Configure your login system to use the same cookie name.

4

Specify the role claim path, such as roles or realm_access.roles, if the JWT contains roles.

5

Add a role mapping for each role that your identity provider issues.

6

Set the access token lifetime between 60 and 86,400 seconds, if required.

7

Set the refresh token lifetime between 60 and 604,800 seconds, if required.

Zuora has the information required to find the public key, read the login cookie, and map user roles. Users with unmapped roles receive the tenant default role.