Re: [keycloak-user] Keycloak OAuth2 bearer token without using direct access grant

After finish of OIDC authentication, Keycloak will redirect to your application with the "code" parameter. Keycloak will always do this, it doesn't matter if you authenticated through SAML identity broker or username/password form or any other method. Then you theoretically need to exchange the code for access-token in backchannel request, however as long as you use our adapters, you don't need to care about it as adapter will do it for you. We have examples (using adapters) where you can also see how is bearer access token retrieved and then used for additional REST calls to REST endpoints secured by bearer token. See the demo example and the "customer-portal" and "product-portal" applications. Marek On 08/12/15 16:48, Ton Swieb wrote: