Token exchange feature in GA

[Navin Kaushik]

Here is the use case:

Third party application using Oauth2 to authenticate users with their own idp and this application needs to consume our REST API with our JWT.

Current Solution:

• Once user is authenticated in their app with their IDP, they need to start Oauth flow with our idp i.e. Keycloak.
• Our idp will redirect to their idp, since user is already authenticated so it will give auth code and our idp will get their access token and after verification our idp will give our JWT.
  
• Their application will now access our REST API with our JWT.

Alternate Solution:

• They call token exchange API of our idp with their JWT to get our JWT in return.
• They access our REST APIs with our JWT.

Second one is quite simpler, but issue is Keycloak provides token exchange feature in technology preview mode. 

Any idea, when this would be available in GA mode ?

-Regards,

Navin

[Navin Kaushik]

Comments from anyone would be highly appreciated!

-Regards,

Navin

[Stian Thorgersen]

Making token exchange supported is one of the top prioritets after Keycloak 26 is out. Exactly when it will be fully supported I don't know, but hoping for early next year. 

--
You received this message because you are subscribed to the Google Groups "Keycloak User" group.
To unsubscribe from this group and stop receiving emails from it, send an email to keycloak-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/keycloak-user/c9864102-16f9-41cc-a2fe-5cd33091226en%40googlegroups.com.

[Navin Kaushik]

Can we use current preview mode in production, do you see any risks ?