Integrating PingOne Authorize with Kong Konnect

Ping Identity’s integration kit for Kong extends Kong’s authorization capabilities through an external policy evaluation service.

Integration with Kong Konnect allows centralized management of API access control and application protection in PingOne Authorize while delegating enforcement to Kong Konnect. Learn more about how traffic flows through Kong Konnect and PingOne Authorize in How API Access Management works.

Configure the integration kit in Kong Konnect to enable management of access control rules in PingOne Authorize. The integration kit works with Kong Konnect or Kong Gateway.

For Kong Konnect integration, the ping-auth plugin has been tested with Kong Gateway 3.4.
Support for Kong Konnect is available in version 1.0.8 and later of the ping-auth plugin.

To configure the integration kit:

Set up an API gateway in PingOne Authorize.
Add the ping-auth plugin to your Kong Konnect control plane.
Upload ping-auth plugin files to each data plane node.
Configure the ping-auth plugin in Kong Konnect.

Learn more about adding custom Konnect plugins in the Kong Konnect documentation.