Description

Valid use-cases from token exchange v1 should be made supported. This does not mean we will support all flows in token exchange v1, and we may find alternative approaches.

Value Proposition

Token exchange v1 fills the need of many use-cases, but is still preview; by providing alternative options (either through token exchange v2, or other means) we can make the use-cases fully supported.

Goals

• Allow applications secured by external IdPs to access resources secured by Keycloak
• Allow applications secured by Keycloak to access resources secured by external IdPs or authorization servers
• Allow applications to securely impersonate users

Non-Goals

• Make token exchange v1 flows supported as is. If everything required in this issue is delivered for 27.0, token exchange v1 will be removed

Discussion

No response

Notes

No response