> This page is for Docs.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://zuora.ferndocs.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://zuora.ferndocs.com/_mcp/server.

# Validate external login

> Learn how to verify the complete sign-in flow for full Experience pages and embedded Experience components.

Learn how to verify the complete sign-in flow for full Experience pages and embedded Experience components.

* The tenant settings are configured.
* The JWKS URL is reachable from the internet.
* The login system can set the configured cookie.

Open the login page provided by your organization.

Authenticate with a test account.

Verify that the response sets the configured cookie.

Confirm that the cookie uses the required domain, security, and same-site attributes.

Open a full Experience page.

Open a page that contains embedded Experience components.

Confirm that both destinations recognize the authenticated user.

Confirm that the expected profile fields and mapped roles are available.

Test an expired or invalid JWT and confirm that the user must authenticate again.

The authentication flow works for both supported Experience destinations, and invalid tokens do not grant access.

## Related links

* [External login validation checklist](/docs/platform/extensibility/experience-builder/external-authentication-with-a-custom-login-system/external-login-validation-checklist)
* [External login responsibilities](/docs/platform/extensibility/experience-builder/external-authentication-with-a-custom-login-system/external-login-responsibilities)