Skip to navigation
ExtensibilityExperience BuilderExternal authentication with a custom login system

Validate external login

View as Markdown

Learn how to verify the complete sign-in flow for full Experience pages and embedded Experience components.

  • The tenant settings are configured.
  • The JWKS URL is reachable from the internet.
  • The login system can set the configured cookie.
1

Open the login page provided by your organization.

2

Authenticate with a test account.

3

Verify that the response sets the configured cookie.

4

Confirm that the cookie uses the required domain, security, and same-site attributes.

5

Open a full Experience page.

6

Open a page that contains embedded Experience components.

7

Confirm that both destinations recognize the authenticated user.

8

Confirm that the expected profile fields and mapped roles are available.

9

Test an expired or invalid JWT and confirm that the user must authenticate again.

The authentication flow works for both supported Experience destinations, and invalid tokens do not grant access.