PingAuthorize

Setting up Kong Gateway using the GUI

Steps

  1. In Kong Manager, select the default workspace and then click Plugins.

    Screen capture of the Plugins window in the default workspace of Kong Manager with the ping-auth plugin loaded

  2. For the ping-auth plugin, click Edit, and then click the toggle to enable the plugin.

    Screen capture of the Update ping-auth plugin window enabling the ping-auth plugin in Kong Manager

  3. Optional: If you want to enable the plugin for specific consumers, services, or routes, click Scoped, and then enter Service, Route, and Consumer information as needed.

  4. Connect Kong Gateway to PingAuthorize:

    1. Copy the PingAuthorize sideband client’s shared secret.

    2. Enter the hostname of your PingAuthorize server and the port of the HTTPS Connection Handler into the Config.Service URL field.

    You can find this port number in the PingAuthorize administrative console by going to Configuration → System → Connection Handlers.

    +

    Example:

    + For example, this field’s value could be https://pingauthorize:8443.

    1. Paste the shared secret into the Config.Shared Secret field in Kong Manager.

    2. Ensure the Config.Secret Header Name value in Kong Manager matches the secret header name configured for the Sideband API Servlet Extension in PingAuthorize.

      Screen capture of the Config.Shared Secret and Config.Service Url configuration for the ping-auth plugin in Kong Manger

  5. Optional: Configure the rest of the optional fields in Kong Manager or the API.

    Option API Field Name Description

    Config.Connection KeepAlive Ms

    connection_keepAlive_ms

    The duration to keep the connection alive for reuse. The default is 60000.

    Config.Connection Timeout Ms

    connection_timeout_ms

    The duration to wait before the connection times out. The default is 10000.

    Config.Enable Debug Logging

    enable_debug_logging

    Controls if requests and responses are logged at the debug level. The default is false. For log messages to show in error.log, you must set log_level = debug in kong.conf.

    Config.Verify Service Certificate

    verify_service_certificate

    Controls whether the service certificate is verified. This is intended for testing purposes and the default is true.

  6. Click Update, and then click Update Plugin.

Result

Kong Gateway is now configured to work with PingAuthorize.