Token-Exchange Use-cases · keycloak keycloak · Discussion #26502

Token-Exchange Use-cases · keycloak keycloak · Discussion #26502 keycloak token exchange A token exchange means that Keycloak receives a request that already contains an access token and has grant type token-exchange Keycloak will verify the access go exchange We use JWT , which is supported out of the box by A token in JWT is self contained This means we can validate the token

go exchange The application requests the resource from the resource server and presents the access token for authentication exchange it for

coexchange 99 Context Users access to the self owned gitlab instance using a SAML client defined on Keycloak I've successfully configured kube-apiserver CVE-2023-0657: Keycloak vulnerable to impersonation via logout token exchange Keycloak is an open-source identity and access management