Skip to navigation
ExtensibilityExperience BuilderExternal authentication with a custom login system

Set the external login cookie

View as Markdown

Learn how to place a signed JWT in the browser so Zuora Experiences can recognize authenticated users.

  • The tenant settings are configured.
  • Your login system has authenticated the user.
  • Your system has created or received a signed JWT.
1

Create or obtain a signed JWT that contains the sub claim.

2

Add optional profile claims, role claims, and expiry claims as needed.

3

Set the cookie with the name configured for the tenant.

4

Set the cookie path to /.

5

Set HttpOnly to yes.

6

Set SameSite to None.

7

Set Secure to yes.

8

Set the domain to a dot-prefixed parent domain, such as .example.com.

9

Set Max-Age to the required browser retention period.

10

Redirect the user to a full Experience page or to a page that contains Experience components.

The browser sends the cookie to the applicable subdomains. Zuora can verify the JWT and load the Experience for the authenticated user.