Public Ideas Portal


ADD A NEW IDEA

AuthN/Z

Showing 5

Allow System Accounts to renew their own token without granting access to other accounts

Currently, it is not possible to grant a system account the permission to only renew/create a new system account token for their specific account only. If a customer has a very restricted role for an account such as "Certificate Admin" for certain...
Guest 9 months ago in Konnect / AuthN/Z 0 Under consideration

Custom Teams should support assigning roles in pre-defined Teams

Customers would like to assign roles in pre-defined teams to custom teams. This would allow customers to assign all roles needed to custom teams instead of building custom teams and mapping groups to both custom teams and pre-defined teams. For ex...
Guest 9 months ago in Konnect / AuthN/Z 0 Under consideration

Permissions/Teams for Custom Plugins

Custom is interested in the ability to create a team with permissions to full CRUD of a Control Plane without allowing any ability to CRUD custom plugins. For example, we have a 'plugin admin' permission set for Control Planes, ideally, this could...
Deirdre Anderson about 1 year ago in Konnect / AuthN/Z 0 Under consideration

Create a new entitlement/permission to allow the creation of Runtime Groups and pin dataplane certificates

Customers working on an automated framework to onboard new Teams into Konnect leverage a service account with privileges in Konnect to do things like create a Runtime Group, setup Teams, Role mappings, etc. In particular, they need the ability to ...
Guest about 1 year ago in Konnect / AuthN/Z 0 Under consideration

Extend IDP SSO and Team mappings to work with access tokens in addition to id tokens

For IDP SSO and team mapping, we only support the ID token: https://docs.konghq.com/konnect/org-management/okta-idp/ "Optionally, if you want to use team mappings, you must configure Okta to include group claims in the ID token." Some customers ar...
Guest over 1 year ago in Konnect / AuthN/Z 0 Under consideration