Authentication and Authorization

Secure your Kong Konnect organization by setting up teams and roles, or enable an external authenticator to manage Kong Konnect authentication and authorization from your own identity provider. Kong Konnect offers multiple options for authentication. The generic SSO with SAML and OIDC allow you to configure authentication with any identity provider that supports these protocols. The Okta specific setup offers an integrated approach for Okta users, supporting both OIDC and SAML, and includes features like team mappings and dashboard integration.

Native authentication through Konnect

The default authentication option in Kong Konnect is basic authentication. You don’t have to do anything special to set it up.

Learn about teams and roles in Konnect
Manage teams and roles
Invite users to join your organization
Teams reference
Roles reference
Social Identity Login
Org switcher

External authentication

Kong Konnect supports single sign-on (SSO) access through Okta with OpenID Connect and SAML

Set up Okta integration
View Kong Konnect teams and roles
Map Okta groups to Konnect teams

More information

Troubleshoot authorization and authentication issues
Login sessions reference