Konnect authentication

Kong Konnect offers multiple options for authentication. You can configure single sign-on with any SAML and OIDC provider or use built-in authentication.

All Konnect Platform Documentation

Built-in authentication through Konnect

The default authentication option in Kong Konnect is basic authentication where users can log in with a username and password.

Users can also register for and sign in to Konnect accounts using their social identity from the following providers:

Google
GitHub
Microsoft

Manage user access

Teams

A team is a group of users with access to the same roles. Teams are useful for assigning access by functionality.

Roles

Roles predefine access to a particular resource, or instances of a particular resource type.

External authentication

Okta single sign-on

Integrate with Okta for single sign-on in Konnect.

Generic single sign-on

Configure single sign-on with Konnect using any provider that supports OIDC or SAML.

OIDC authentication

Enable OpenID Connect authentication as an alternative to built-in authentication.

Team mappings

Map teams from your IdP to Konnect.