Skip to navigation
ExtensibilityExperience BuilderExternal authentication with a custom login system

Use an existing identity provider

View as Markdown

Learn how to reuse an identity provider that already signs JWTs and publishes a JWKS URL.

  • Your identity provider signs JWTs.
  • Your identity provider publishes a reachable JWKS URL.
  • Your identity provider can provide the sub claim.
1

Provide the existing JWKS URL in the tenant settings.

2

Configure the cookie name that your system sets in the browser.

3

Specify the role claim path used by the identity provider.

4

Map the identity provider roles to Zuora Experience roles.

5

Confirm that the JWT contains the sub claim.

6

After authentication, place the identity provider token in the browser as the configured cookie.

7

Apply the required cookie attributes in External login cookie attributes.

8

Redirect the user to the required destination.

You reuse the existing identity provider keys. You do not need to create a new key pair or publish a new JWKS URL.