---
title: Preparing PingAuthorize for Kong Gateway integration
description: Prepare PingAuthorize to receive authorization requests from Kong Gateway.
component: pingauthorize
version: 10.3
page_id: pingauthorize:pingauthorize_integrations:paz_kong_prepare_paz
canonical_url: https://docs.pingidentity.com/pingauthorize/11.1/pingauthorize_integrations/paz_kong_prepare_paz.html
llms_txt: https://docs.pingidentity.com/pingauthorize/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: 2025-03-27T00:00:00Z
superseded_by: https://docs.pingidentity.com/pingauthorize/11.1/pingauthorize_integrations/paz_kong_prepare_paz.html
section_ids:
  before-you-begin: Before you begin
  steps: Steps
---

# Preparing PingAuthorize for Kong Gateway integration

For Kong Gateway to use PingAuthorize as an external authorization policy runtime service, you must prepare PingAuthorize to receive authorization requests from Kong Gateway.

## Before you begin

* Install and start Kong Gateway. Learn more in the [Kong Gateway](https://docs.konghq.com/gateway/) documentation.

* Install and start PingAuthorize. Learn more in [Installing PingAuthorize](../installing_and_uninstalling_pingauthorize/paz_install_pingauthorize.html).

## Steps

1. In the PingAuthorize admin console, go to **Configuration > HTTP Servlet Extensions > Sideband API**.

2. In the **Request Context Method** list, select **State**.

3. In the **Shared Secret Header Name** field, enter `CLIENT-TOKEN`.

4. Next to the **Selected** table for **Shared Secrets**, click the **[icon: plus, set=fa]**icon to create a new shared secret.

   |   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
   | - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | The shared secret authenticates the `ping-auth` plugin to PingAuthorize. Version 1.2.0 of the plugin supports referenceable secrets. For security reasons, store the shared secret in a vault supported by Kong. Learn more in [Secrets Management](https://docs.konghq.com/gateway/latest/kong-enterprise/secrets-management/) and [Environment Variables Vault](https://docs.konghq.com/gateway/latest/kong-enterprise/secrets-management/backends/env/) in the Kong documentation. |

5. In the modal dialog, create a suitably long shared secret value, and then click **Save To PingAuthorize Server Cluster**.

6. At the top of the **Edit Sideband API HTTP Servlet Extension** page, click **Save**.

   ![Screen capture of the Sideband API HTTP Servlet Extension window with settings configured as previously specified for Kong Gateway](_images/wxm1658431061823.png)