To offload authentication on an API gateway like Kong, you can use Ory's identity and access management solution. Here's a general approach based on the information provided in the extracts: 1. Email Authentication: Implement the one-time code strategy for email authentication. You need to choose an email address field as the primary identifier for this strategy in the Identity Schema. Ensure you have a reliable email delivery provider. You can set up your own SMTP provider to have full control over the email delivery process. Customize the login and registration email templates to match your brand. More information can be found [here](https://www.ory.sh/docs/kratos/passwordless/one-time-code). 2. Social Logins: Ory supports custom-tailored connectors for 15+ social sign-in providers such as GitHub, Google, or Facebook. You can also connect any OpenID Connect-compliant identity provider using the Generic provider integration. For example, to add Auth0 as a social sign-in provider, you need to follow a series of steps involving the Ory Console and the Auth0 dashboard. More information can be found [here](https://www.ory.sh/docs/kratos/social-signin/auth0) and [here](https://www.ory.sh/docs/kratos/social-signin/overview). Remember, adding social sign-in to your system can increase conversion rates by up to 40% as it removes the friction that comes with having to remember another set of credentials. Please note that the specific steps to integrate Ory with Kong API Gateway are not provided in the extracts. For detailed instructions, you may need to refer to the official Ory and Kong documentation or community resources.