Konnect platform authentication

Configure single sign-on with any SAML and OIDC provider, use built-in authentication, or manage access tokens for API and CLI access

Built-in UI authentication through Konnect

The default authentication option in Konnect is basic authentication, where users can log in with a username and password. Users can also set up passkeys when they log into Konnect using their username and password.

Users can also register for and sign in to Konnect accounts using their social identity from the following providers:

  • Google
  • GitHub
  • Microsoft

Multi-Factor Authentication (MFA): MFA is only required for Konnect Plus and Enterprise users. Konnect Plus and Enterprise users signing in with built-in authentication (i.e. using username and password) are prompted to set up MFA the first time that they sign in to Konnect. New Konnect signups using basic authentication can opt in to MFA during sign-up or later through the organization settings. MFA is recommended for all Konnect organizations regardless of the organization tier as a security best practice.
If you need to reset your MFA, reach out to Kong Support.

Did this doc help?

Something wrong?

Help us make these docs great!

Kong Developer docs are open source. If you find these useful and want to make them better, contribute today!