Welcome to Zuora Product Documentation

Explore our rich library of product information

Configure External JWT

Learn how to configure external JWT authentication so that your customers can use their own identity system to authenticate users in Experience Builder.

If your customers use their own identity system and sync it with Experience Builder, you do not need to sync accounts or create and manage users manually in Zuora. Instead, your customers can share JSON Web Tokens (JWTs) with Zuora. Zuora uses these tokens to create user accounts automatically and to authorize users to log in to the Experience Builder UI, where they can view and update their experiences.

If your customers do not use their own identity system, you can use the User Management module to manage authentication and authorization in Zuora.

  1. Navigate to Customers > User Accounts > Settings.
  2. Expand the External JWT section to configure the external identity provider for federated authentication.
  3. In the JWKS Endpoint URL field, enter the URL of your identity provider's JWKS endpoint that Zuora uses to validate JWT signatures.