> This page is for Docs.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://zuora.ferndocs.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://zuora.ferndocs.com/_mcp/server.

# Use an existing identity provider

> Learn how to reuse an identity provider that already signs JWTs and publishes a JWKS URL.

Learn how to reuse an identity provider that already signs JWTs and publishes a JWKS URL.

* Your identity provider signs JWTs.
* Your identity provider publishes a reachable JWKS URL.
* Your identity provider can provide the sub claim.

Provide the existing JWKS URL in the tenant settings.

Configure the cookie name that your system sets in the browser.

Specify the role claim path used by the identity provider.

Map the identity provider roles to Zuora Experience roles.

Confirm that the JWT contains the sub claim.

After authentication, place the identity provider token in the browser as the configured cookie.

Apply the required cookie attributes in External login cookie attributes.

Redirect the user to the required destination.

You reuse the existing identity provider keys. You do not need to create a new key pair or publish a new JWKS URL.

## Related links

* [Configure external login settings](/docs/platform/extensibility/experience-builder/external-authentication-with-a-custom-login-system/configure-external-login-settings)
* [External login cookie attributes](/docs/platform/extensibility/experience-builder/external-authentication-with-a-custom-login-system/external-login-cookie-attributes)