Dev Portal team mapping

Beta and uses: Dev Portal

With teams mapped from an IdP, the developers and permissions are mapped automatically in Konnect so you don’t have to manually copy over each team of developers.

This guide explains how to map the permissions, including scopes and claims, from your group of developers in your IdP to your organization’s team in Konnect. Although this guide uses Okta, Azure Active Directory (AD), and Auth0 as examples, you can use any IdP that conforms to OIDC standards.

Prerequisites

  • A test developer account in your IdP
  • An application for Konnect configured in your IdP:

Set up developer teams and group claims in your IdP

Map IdP developer teams in Konnect

  1. In Dev Portal, click Settings.

  2. In the General setting tab, enable Portal RBAC.

    Enabling RBAC allows you to create teams in Konnect. You can disable RBAC after you map teams from your IdP if you don’t want to use it.

  3. From the Teams settings in the side bar, click New Team and configure the team.

  4. From the IdP team you just created, click the APIs tab and click Add Roles. This allows you to assign APIs and the role for the APIs to members of your IdP team.

  5. From Settings in the Dev Portal side bar, click the Identity tab and then click Configure OIDC provider.

  6. Configure the IdP settings using the following mappings:
    • Provider URL: The value stored in the issuer variable from your application in your IdP.
    • Client ID: The application ID from your application in your IdP.
    • Client Secret: The client secret from your application in your IdP.
    • Scopes: The scopes to be requested from your application in your IdP.
    • Claim Mappings - Name: name
    • Claim Mappings - Email: email
    • Claim Mappings - Groups: groups
  7. Click the Team Mappings tab, and then select IdP Mapping Enabled.

  8. Enter the exact name of your team from your IdP next to the name of the Konnect team you want to map it to.

Test developer team mappings

Now that you’ve configured the IdP team mappings in Konnect for the Dev Portal, you can test the team mappings.

Find your Dev Portal URL in the Dev Portal settings in the Portal Domain, navigate to that URL, and log in as a test developer that is assigned to the team in your IdP.

Something wrong?

Help us make these docs great!

Kong Developer docs are open source. If you find these useful and want to make them better, contribute today!