---
title: Integrating PingOne Authorize with Kong Konnect
description: Ping Identity's integration kit for Kong extends Kong's authorization capabilities through an external policy evaluation service.
component: pingone
page_id: pingone:authorization_using_pingone_authorize:p1_az_kong_konnect_integration
canonical_url: https://docs.pingidentity.com/pingone/authorization_using_pingone_authorize/p1_az_kong_konnect_integration.html
revdate: April 3, 2025
---

# Integrating PingOne Authorize with Kong Konnect

Ping Identity's integration kit for Kong extends Kong's authorization capabilities through an external policy evaluation service.

Integration with Kong Konnect allows centralized management of API access control and application protection in PingOne Authorize while delegating enforcement to Kong Konnect. Learn more about how traffic flows through Kong Konnect and PingOne Authorize in [How API Access Management works](p1az_introduction.html#section_lvy_vgt_zsb).

Configure the integration kit in Kong Konnect to enable management of access control rules in PingOne Authorize. The integration kit works with Kong Konnect or [Kong Gateway](p1az_kong_gateway_integration.html).

|   |                                                                                                                                                                                              |
| - | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | * For Kong Konnect integration, the `ping-auth` plugin has been tested with Kong Gateway 3.4.

* Support for Kong Konnect is available in version 1.0.8 and later of the `ping-auth` plugin. |

To configure the integration kit:

1. [Set up an API gateway](p1_az_preparing_for_kong_konnect_integration.html) in PingOne Authorize.

2. [Add the ping-auth plugin](p1_az_configuring_konnect_for_integration.html#control-plane) to your Kong Konnect control plane.

3. [Upload ping-auth plugin files](p1_az_configuring_konnect_for_integration.html#data-plane-nodes) to each data plane node.

4. [Configure the ping-auth plugin](p1_az_configuring_konnect_for_integration.html#plugin-konnect) in Kong Konnect.

Learn more about adding custom Konnect plugins in the [Kong Konnect](https://docs.konghq.com/konnect/gateway-manager/plugins/add-custom-plugin/) documentation.