> This page is for Docs.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://zuora.ferndocs.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://zuora.ferndocs.com/_mcp/server.

# Set the external login cookie

> Learn how to place a signed JWT in the browser so Zuora Experiences can recognize authenticated users.

Learn how to place a signed JWT in the browser so Zuora Experiences can recognize authenticated users.

* The tenant settings are configured.
* Your login system has authenticated the user.
* Your system has created or received a signed JWT.

Create or obtain a signed JWT that contains the sub claim.

Add optional profile claims, role claims, and expiry claims as needed.

Set the cookie with the name configured for the tenant.

Set the cookie path to /.

Set HttpOnly to yes.

Set SameSite to None.

Set Secure to yes.

Set the domain to a dot-prefixed parent domain, such as .example.com.

Set Max-Age to the required browser retention period.

Redirect the user to a full Experience page or to a page that contains Experience components.

The browser sends the cookie to the applicable subdomains. Zuora can verify the JWT and load the Experience for the authenticated user.

## Related links

* [External login cookie attributes](/docs/platform/extensibility/experience-builder/external-authentication-with-a-custom-login-system/external-login-cookie-attributes)
* [External login JWT claims](/docs/platform/extensibility/experience-builder/external-authentication-with-a-custom-login-system/external-login-jwt-claims)