> This page is for Docs.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://zuora.ferndocs.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://zuora.ferndocs.com/_mcp/server.

# External login validation checklist

> Use this reference to verify common configuration conditions before publishing external login.

Use this reference to verify common configuration conditions before publishing external login.

| Check           | Expected result                                                     |
| --------------- | ------------------------------------------------------------------- |
| Cookie domain   | Uses a dot-prefixed parent domain, such as .example.com.            |
| Cookie name     | Matches the name configured in the tenant settings.                 |
| Cookie security | Uses Secure, HttpOnly, and SameSite=None.                           |
| JWKS URL        | Is reachable by Zuora over HTTPS.                                   |
| JWT subject     | Contains the required sub claim.                                    |
| JWT signature   | Uses RS256 and matches a public key in the JWKS response.           |
| JWT expiry      | Contains a valid exp value and uses a synchronized server clock.    |
| Role path       | Points to the claim that contains the user roles.                   |
| Role mappings   | Include each role that the identity provider issues.                |
| Destination     | Works for full Experience pages and embedded Experience components. |