---
title: Configuring PingAccess for Kong Gateway integration
description: To allow Kong Gateway to use the PingAccess Sideband API for authorization and request and response modification, create a sideband client in PingAccess that represents Kong Gateway.
component: pingaccess
version: 9.0
page_id: pingaccess:agents_and_integrations:pa_configuring_pa_for_kong_gateway_integration
canonical_url: https://docs.pingidentity.com/pingaccess/9.0/agents_and_integrations/pa_configuring_pa_for_kong_gateway_integration.html
revdate: April 11, 2025
section_ids:
  before-you-begin: Before you begin
  about-this-task: About this task
  steps: Steps
  result: Result:
  next-steps: Next steps
---

# Configuring PingAccess for Kong Gateway integration

To allow Kong Gateway to use the PingAccess Sideband API for authorization and request and response modification, create a sideband client in PingAccess that represents Kong Gateway.

## Before you begin

* Verify that the `sideband.http.enabled` property is set to `true` in the PingAccess `run.properties` file. Learn more in the [Configuration file reference](../reference_guides/pa_config_file_ref.html).

* Review the **Sideband model** section in [How do I choose a deployment model?](../introduction_to_pingaccess/pa_choose_a_deployment_model.html) and [Protecting an API with PingAccess in a sideband deployment](../pingaccess_use_cases/pa_protecting_an_api_with_pa_in_a_sideband_deployment.html).

## About this task

Prepare PingAccess to authenticate requests from Kong Gateway by configuring a header name and shared secret for Kong Gateway to authenticate with.

|   |                                                                                                                                                    |
| - | -------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | You can find more information about sideband clients in [Sideband Clients](../pingaccess_user_interface_reference_guide/pa_sideband_clients.html). |

## Steps

1. In the PingAccess admin console, click **Applications**, then go to **Sideband Clients**.

2. Click **[icon: plus, set=fa]Add Sideband Clients**.

3. In the **Name** field, enter a unique name for the sideband client.

4. (Optional) In the **Description** field, enter a description for the sideband client.

5. In the **Secrets** section, add a secret:

   ### Result:

   The **New Secret** page opens.

6. On the **New Secret** page, click **Copy** to copy the new secret to your clipboard.

   |   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
   | - | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | * Save the secret in a secure location. You'll use it in the following procedure.

   * Version 1.2.0 of the `ping-auth` plugin supports referenceable secrets. For security reasons, store the shared secret in a vault supported by Kong. Learn more in [Secrets Management](https://docs.konghq.com/gateway/latest/kong-enterprise/secrets-management/) and [Environment Variables Vault](https://docs.konghq.com/gateway/latest/kong-enterprise/secrets-management/backends/env/) in the Kong documentation.

   * When you use the secret, replace the `<client name>` placeholder value with the **Name** you configured in step 3. |

7. Click **Done**.

8. (Optional) In the **Header Name** field, enter a unique, descriptive name to make it easier to tell your configured secrets apart.

9. Click **Save**.

## Next steps

[Configure Kong Gateway for integration with PingAccess](pa_configuring_kong_gateway.html).