Kong Identity Documentation

Unified authentication platform within Kong Konnect.

Learn how Kong Identity directories group principals by region, control which control planes can authenticate against them, and cache lookups.

Learn how Kong Identity principals represent authenticating entities and centralize identity, credentials, and metadata across Kong Gateway, Event Gateway, and Dev Portal.

Store third-party credentials with Kong Identity Token Vault

Kong Identity enables you to use Konnect to generate, authenticate and authorize API access. Kong Identity implements the OAuth2.0 standard with OpenID Connect for authentication and authorization.

Learn how to secure Kafka traffic in Event Gateway with Kong Identity.

Learn how to configure Kong Identity with OIDC.

Learn how to configure Kong Identity with OAuth 2.0 Introspection.

Learn how to configure Kong Identity with Upstream OAuth.

Learn how to configure Dynamic Client Registration to automatically create Dev Portal applications in Kong Identity.

Use the Key Authentication plugin to allow Principals to authenticate with an API key.

Use the Basic Authentication plugin to allow Principals to authenticate with a username and password.

Use the OpenID Connect plugin to map authenticated OAuth clients to Kong Identity principals.

Learn how to enable the Kong Identity Token Vault, register a vault key, trust a corporate IdP, and add a GitHub provider.