What is SAML? Security Assertion Markup Language (SAML) is an XML-based open standard that allows organizations to set up single sign-on (SSO) across multiple websites and applications. SAML 2.0 is the latest standard, and was ratified in March 2005, replacing SAML 1.1. We’ll refer to SAML as…
[](/blog/engineering/configure-saml-2-0-single-sign-on-with-kong-enterprise)
We're excited to announce new features in Kong Konnect that are designed to increase security and streamline API management. Read on to learn more about what's new in Kong Konnect. Now you can give your users secure and fine-grained access to track analytics and monitoring information in Kong…
[](/blog/product-releases/konnect-supports-dynamic-client-registration)
We're excited to announce the general availability of Kong Enterprise 3.1. In Kong Enterprise 3.1, we build on the foundation of our plugin ecosystem by introducing five new plugins and enhancing the functionality of existing ones. These include: We'll explore the ins and outs of each of these…
[](/blog/product-releases/kong-enterprise-3-1)
As an application developer, have you ever had to troubleshoot an issue that only happens in production? Bugs can occur when your application gets released into the wild, and they can be extremely difficult to debug when you cannot reproduce without production data. In this blog, I am going to show…
[](/blog/engineering/debugging-applications-in-production-with-service-mesh)
Kong connects APIs and microservices natively within clouds, data centers, and Kubernetes platforms using intelligent automation. Built on an open source core, Kong's solutions enable digital innovation by allowing organizations to reliably and securely manage the full lifecycle of APIs for legacy…
[](/blog/news/red-hat-openshift-service-on-aws)
For the third consecutive year, we're happy to announce that Kong has been recognized as a Leader in the Gartner Magic Quadrant for Full Life Cycle API Management and is positioned furthest to the right for Completeness of Vision. This graphic was published by Gartner, Inc. as part of a larger…
[](/blog/news/gartner-magic-quadrant-api-management-2022)
In the Dev Portal world, offering users the ability to use their own domain is a milestone on our way to fully customized Dev Portals. Since Konnect-hosted portals are fronted by a Kong gateway, we looked to use our own plugins to achieve this feature. The ACME plugin is an open-source Kong plugin…
[](/blog/engineering/secure-self-service-custom-domains-for-dev-portals)Observability is a critical part of Kong's API Gateway . In this post, we'll describe two options to monitor Kong Gateway using Prometheus. Prometheus is an open source system monitor toolkit built at SoundCloud that is now widely adopted. StatsD was originally a simple daemon developed by Etsy to…
[](/blog/engineering/how-to-use-prometheus-to-monitor-kong-gateway)
Today we’re excited to announce the release of Kong Mesh and Kuma 2.0. With this new major release, we’re announcing the first availability of our next-generation policies, in addition to new eBPF capabilities. 2.0 is also significant as we have unified the version scheme between Kong Mesh and…
[](/blog/product-releases/kong-mesh-and-kuma-2-0)
From time to time, Kong’s Brad Drysdale and Ahmed Koshok exchange emails about the latest trends in tech. In this exchange, Brad and Ahmed discuss the continued quest for more innovation faster, the role of automation in API strategy, and more. from: Brad to: Ahmed date: Oct. 29, 2022, 6:58 PM…
[](/blog/enterprise/building-cloud-native-applications)As a Solutions Engineer here at Kong, one question that frequently comes across my desk is “how can I transform a Kong logging plugin message into a format that my insert-observability-stack-here understands, (e.g., ELK, Loki, Splunk, etc.)?” In this blog, I’m going to show you how to easily…
[](/blog/engineering/transforming-kong-logs-for-ingestion-into-your-observability-stack)
A common use case that is frequently requested is how to dynamically route requests based on authentication attributes. An example of this technique is routing requests to relevant upstream services based on claims contained in a JWT token. Admins would like all their clients to go to the same URI…
[](/blog/engineering/dynamic-routing-jwt-tokens-claim-with-kong-konnect)
As infrastructure becomes more and more distributed, building better observability around it is becoming crucial. With the emergence of microservices architecture, teams want to gain better visibility with proper observability built into the architecture. In this blog post, we’ll explain how we…
[](/blog/engineering/end-to-end-observability-in-konnect)
We’re excited to announce new features in Kong Konnect , including the ability to take advantage of identity management APIs, streamlined certificate management, and latency metrics as part of Analytics . Read on to learn about these features and how kong helps future-proof API security . Now you…
[](/blog/product-releases/kong-konnect-security-updates)
Many of Kong’s features rely on timers, such as caching, DNS, and health checks. Kong also runs some async tasks using the timer, such as the rate-limiting plugin, which connects to the database using the timer to make the request finish quickly. As Kong’s user population grows, so does the…
[](/blog/engineering/scalable-timer-library)Secure your AI infrastructure with prompt guards, PII sanitization, and centralized governance. Control LLM costs with token-based rate limiting and semantic routing across providers.