Learn how to configure and update Zuora Named Credentials in Salesforce. Proper configuration of the External Authentication Identity Provider enables secure OAuth authentication and allows Salesforce to make authenticated API callouts to Zuora services.

1. Log in to Salesforce using your Salesforce admin credentials.
2. Navigate to Setup.
3. In the Quick Find search box, enter Named Credentials.
4. Select Named Credentials from the search results.
5. In the Named Credentials setup area, click External Auth Identity Providers.
6. Click Zuora OAuth to open the existing external authentication provider configuration.
7. Click Edit.
8. In the Authentication Protocol, select OAuth 2.0.
9. In Authentication Flow Type, select Authorization Code (Browser Flow).
10. In the Client ID field, enter the OAuth Client ID that was generated in Zuora One ID. See Create an OAuth 2.0 client in Zuora OneID.
11. In the Client Secret field, enter the OAuth Client Secret that was generated in Zuora One ID.
12. Enter the authorization endpoint URL for your OneID environment.

    Environment	Authorization Endpoint URL
    Sandbox	https://one.zuora.com/oauth2/authorize
    Production	https://one.zuora.com/oauth2/authorize

13. Enter the token endpoint URL for your OneID environment.

    Environment	Token Endpoint URL
    Sandbox	https://one.zuora.com/oauth2/token
    Production	https://one.zuora.com/oauth2/token

14. Click Save to update the External Authentication Identity Provider configuration.
    Note:

    Ensure that Callouts is enabled for all environments listed under the Named Credentials tab. To verify this, click Edit next to each environment and confirm that the Enable for Callouts option is enabled.