Merge branch 'main' into docs/usehall-integration

Author: alex72508

src/content/docs/authenticate/custom-configurations/static-ip.mdx

@@ -0,0 +1,37 @@
+---
+page_id: d8bf80b5-d1b1-4662-a4d1-76cf4024e01a
+title: Static IP
+sidebar:
+  order: 8
+relatedArticles:
+  - c53c9254-7bbb-4d58-b949-3ccdc3cd3dee
+description: Guide to using a static IP address for your Kinde business.
+metadata:
+  topics: [authenticate]
+  sdk: []
+  languages: []
+  audience: [developer, enterprise-admin]
+  complexity: advanced
+  keywords: [static-ip, infrastructure, whitelist]
+  updated: 2025-08-06
+featured: false
+deprecated: false
+---
+
+<Aside type="upgrade">
+
+Only businesses on the [Kinde Enterprise plan](https://kinde.com/pricing/) can enable a static IP address for their Kinde business. Additional fees apply.
+
+</Aside>
+
+For companies who work in highly regulated industries such as government, financial services, or education, it is a common requirement to maintain strict 'whitelists' for accessing the internet. For customers with these requirements, Kinde can provide static IP addresses.
+
+## Dynamic IPs are used by default
+
+Kinde uses AWS public cloud to host our services. We make use of AWS's highly scalable infrastructure to ensure the best availability and performance. This infrastructure design means that your Kinde business is assigned a DNS address created during onboarding, which will have a dynamic IP address managed by AWS. You then whitelist the Kinde business domain or your custom domain, to ensure that your customers can access authentication to your product.
+
+## Request a static IP address
+
+For Kinde enterprise customers who have strict IP-based whitelists, Kinde can provide a pair of static IP addresses. We use AWS's Global Accellerator to provision 2 IP addresses assigned to your Kinde business and custom domain, which will ensure that the IP addresses are always the same.
+
+Please reach out to our team at [email protected] to discuss your requirements.

src/content/docs/billing/about-billing/billing-concepts-terms.mdx

@@ -21,6 +21,11 @@ deprecated: false
 
 'Billing' refers to the broad function of creating plans, setting pricing, collecting payments, etc. Here are some of the common concepts and terms you will come across.
 
+## Billing identifiers
+
+- **Customer ID** - A `customer_id` uniquely identifies a user or org who has signed up to a plan. This is different to a `user_id` or `org_id` that identifies the user or org as an entity. 
+- **Customer Agreement ID** - A `customer_agreement_id` identifies the contract or agreement created in Stripe when a plan is signed up to. The agreement ID is then associated with the `customer_id` in Kinde.
+
 ## Key concepts
 
 - **Plan groups** - Plan groups organize multiple plans under a common category, helping segment offerings by use case, customer size, or market. A group is scoped to either organizations (B2B) or individual customers (B2C). You can have multiple plan groups, but each plan must belong to a group.

src/content/docs/billing/manage-subscribers/add-metered-usage.mdx

@@ -31,6 +31,8 @@ Adding usage values requires two key pieces of information:
 
 - Via the Kinde UI - Open the user or organization record in Kinde and select **Billing** in the menu. The customer agreement shows as part of the subscription details. 
 
+![Example of agreement ID in Kinde](https://imagedelivery.net/skPPZTHzSlcslvHjesZQcQ/6488a69d-a47d-413b-a3b3-47a39398b600/public)
+
 ## Get the feature ID
 
 1. Open the plan the feature belongs to.

src/content/docs/build/set-up-options/self-serve-portal-for-orgs.mdx

@@ -37,9 +37,11 @@ A self-serve portal means your customers can make basic account changes without
 ## Configure the organization self-serve portal
 
 1. Go to **Settings > Environment > Self-serve portal**.
+   ![Settings for self-serve portal for orgs](https://imagedelivery.net/skPPZTHzSlcslvHjesZQcQ/81169031-611b-402a-20f7-47c84f53b600/public)
 2. Enter the **Return URL** that you want users to land on when they exit the portal, e.g. your app dashboard.
 3. Add an **Organization alias** to represent how your customers are referred to in your business, e.g. Account, Partner, Workspace, etc. This will be visible in the interface in the portal.
 4. In the **Organization profile** section, select the functions you want organization admins to be able to manage.
+   ![Options for showing hiding settings for org members](https://imagedelivery.net/skPPZTHzSlcslvHjesZQcQ/13cf1ec6-bbe1-4059-4c78-b97d94b2b200/public)
 5. Select **Save**.
 
 ## Portal access control with system permissions
@@ -48,7 +50,9 @@ Each core function within the self-serve portal is governed by a corresponding s
 
 These permissions can be included in your custom roles and assigned to organization members.
 
-We recommend creating custom roles with varying levels of portal access, which you can then assign as needed. For instance, you might create a role that allows members to view billing details but not update them.
+We recommend creating custom roles with varying levels of portal access, which you can then assign as needed. For instance, you might create a role that allows members to view billing details but not update them. You can select these permissions within your existing roles, or when you create them.
+
+![Roles with system permissions for self-serve portal](https://imagedelivery.net/skPPZTHzSlcslvHjesZQcQ/1e90e72e-00d5-4063-8d34-79d1a9b8f000/public)
 
 When [configuring org roles](/billing/get-started/add-billing-role/), you can specify whether it should be:
 
@@ -57,7 +61,9 @@ When [configuring org roles](/billing/get-started/add-billing-role/), you can sp
 
 ## Generate the self-serve portal link
 
-Access to the portal is granted via a one-time link. There are two main ways to generate this link:
+Access to the portal is granted via a one-time link. You then use the link on an 'account' or 'profile' button in your app to open the Kinde portal screens. 
+
+There are two main ways to generate this link:
 
 - **Using the user's access token** (recommended)
 - **Using the Kinde Management API**
@@ -113,3 +119,9 @@ Make a request to the `POST /api/v1/portal/generate_url` endpoint using an M2M t
 ```
 
 This will return a one-time portal link for the specified user.
+
+## How the self-serve portal looks
+
+When the user clicks the link you've added to your app, the portal opens. The default design is shown below, and we are working on allowing you to style this yourself. The options a member sees depends on their role and what you have chosen to display.
+
+![Self-serve portal in Kinde](https://imagedelivery.net/skPPZTHzSlcslvHjesZQcQ/fb38548b-e530-4dfa-68b3-29ef2f287700/public)

src/content/docs/build/set-up-options/self-serve-portal-for-users.mdx

@@ -38,8 +38,10 @@ A self-serve portal means your customers can make basic account changes without
 ## Configure the user self-serve portal
 
 1. Go to **Settings > Environment > Self-serve portal**.
+   ![Settings for self-serve portal set up in Kinde](https://imagedelivery.net/skPPZTHzSlcslvHjesZQcQ/81169031-611b-402a-20f7-47c84f53b600/public)
 2. Enter the **Return URL** that you want users to land on when they exit the portal, e.g. your app dashboard. This can also be used as a fallback URL if you decide to use the SDK method of dynamically generting the URL (see below).
 3. In the **User profile** section, select the functions you want the user to be able to manage. If you select **Billing**, they can manage their plan as well as payment methods.
+   ![Self-serve portal settings for users](https://imagedelivery.net/skPPZTHzSlcslvHjesZQcQ/f821e9c5-497d-41f0-b373-2755320d1c00/public)
 4. Select **Save**.
 
 ## Generate the self-serve portal link
@@ -98,3 +100,13 @@ Make a request to the `POST /api/v1/portal/generate_url` endpoint using an M2M t
 ```
 
 This will return a one-time portal link for the specified user.
+
+## How the self-serve portal looks
+
+When the user clicks the link you've added to your app, the portal opens. The default design is shown below, and we are working on allowing you to style this yourself. The options a member sees depends on their role and what you have chosen to display.
+
+![Self-serve portal in Kinde](https://imagedelivery.net/skPPZTHzSlcslvHjesZQcQ/4b3574c5-a499-4da5-e8d0-467d56255e00/public)
+
+You can also watch this short video showing how the portal works when a customer signs up for a plan using Kinde billing.
+
+<YoutubeVideo videoId="xxVwZW8OxIA" videoTitle="The customer billing experience with Kinde"/>

src/content/docs/design/customize-with-code/understand-page-design.mdx

@@ -265,7 +265,7 @@ Shown after primary authentication when MFA is required or being set up.
 - `(mfa_use_recovery_code)` – Enter a recovery code if unable to use other MFA methods.
 - `(mfa_view_recovery_codes)` – View and save MFA recovery codes.
 
-### Billing (coming soon)
+### Billing
 
 Pages related to choosing a plan and making a payment.
 
@@ -339,4 +339,4 @@ export const pageSettings = {
 };
 ```
 
-This allows you to have fine grained control over what your pages can access.
+This allows you to have fine grained control over what your pages can access.

src/content/docs/developer-tools/guides/deploy-on-vercel.mdx

@@ -99,7 +99,7 @@ If you don’t have an existing project, create a project with a starter kit fro
     - KINDE_CLIENT_ID
     - KINDE_CLIENT_SECRET
     - KINDE_ISSUER_URL (Domain in Kinde)
-6. Change the variables as follows, using Vercel values:
+6. Change the variables as follows, using Vercel values (e.g. `https://vercel-nextjs-kinde.vercel.app`):
     - KINDE_SITE_URL
     - KINDE_POST_LOGOUT_REDIRECT_URL
     - KINDE_POST_LOGIN_REDIRECT_URL