You can connect to TKG clusters on Supervisor using an external identity provider and the Pinniped authentication service for Kubernetes.