Set up a Kinde connector

C1 provides identity governance for Kinde. Integrate your Kinde tenant with C1 for unified visibility and governance over users and organization membership.

C1 provides identity governance for Kinde. Integrate your Kinde tenant with C1 for unified visibility and governance over users and their membership in organizations.

Capabilities

Resource	Sync	Provision
Users
Organizations

The connector reads users and organizations from the Kinde Management API. Each organization exposes a member entitlement; the connector syncs which users belong to each organization.

This connector is read-only. It does not provision or modify access in Kinde. Roles, permissions, and feature flags are not synced.

Gather Kinde credentials

Create a Kinde machine-to-machine (M2M) application authorized against the Kinde Management API with read:users, read:organizations, and read:organization_users scopes. All three are required.

1. Sign in to the Kinde dashboard for your tenant. Note your tenant subdomain — for example, if your dashboard is at acme.kinde.com, your API base URL is https://acme.kinde.com.

2. Navigate to Settings > Applications and add a new application. Choose Machine to machine (M2M) application as the type, then save and copy the Client ID and Client secret.

3. Open Settings > APIs > Kinde Management API > Applications. Add the M2M application you created.

4. Under that application’s scopes, enable read:users, read:organizations, and read:organization_users.

Configure the Kinde connector

Cloud-hosted

Follow these instructions to use a built-in, no-code connector hosted by C1.

1. In C1, navigate to Integrations > Connectors and click Add connector.

2. Search for Kinde and click Add.

3. Choose how to set up the new Kinde connector.

4. Set the owner for this connector.

5. Click Next.

6. Find the Settings area of the page and click Edit.

7. Enter the Kinde credentials:

   • Kinde base URL: Your tenant API base URL, for example https://acme.kinde.com (no trailing slash, no /api/v1 suffix).
   • M2M client ID: The client ID from your M2M application.
   • M2M client secret: The client secret paired with the M2M client ID.
8. Click Save.

9. The connector’s label changes to Syncing, followed by Connected. You can view the logs to ensure that information is syncing.

Done. Your Kinde connector is now pulling access data into C1.

Self-hosted

Follow these instructions to run the Kinde connector in your own environment.

1. Create secrets for the Kinde M2M credentials.

2. Configure the connector environment variables:

   BATON_BASE_URL=https://acme.kinde.com
   BATON_KINDE_CLIENT_ID=<M2M client ID>
   BATON_KINDE_CLIENT_SECRET=<M2M client secret>
   
3. Deploy the connector using your standard self-hosted connector process.

Done. Your Kinde connector is now pulling access data into C1.

Connector configuration reference

Setting	Environment variable	Required	Description
Kinde base URL	BATON_BASE_URL	Yes	Full Backend API base URL for your Kinde tenant, for example https://acme.kinde.com. No trailing slash or /api/v1 suffix.
M2M client ID	BATON_KINDE_CLIENT_ID	Yes	Client ID of the M2M application authorized against the Kinde Management API.
M2M client secret	BATON_KINDE_CLIENT_SECRET	Yes	Client secret paired with the M2M client ID. Stored as a secret.