Keycloak Token Exchange
At Bar-Code Developer Barcamp last week someone mentioned a feature named On behalf of in Microsoft Entra (in the context of a user requesting an Agent/LLM to query the database on her behalf). That lead me to the question: does keycloak support this as well? And indeed it does. In Keycloak it鈥檚 just called Token Exchange and was introduced as a stable feature in Keycloak 26.2 So given a ui client, and orchestrating backend client (named cxc) and multiple resource servers (e....