You can use the Resource Owner Password Credentials (we call it direct grant) flow from OAuth2 with Keycloak. That let's you exchange a username/password for a token. We highly recommend you stick with the redirect based login though. It's more secure and you get a lot of extra features that way (required actions, totp, reset password, SSO, etc, etc) On 4 January 2016 at 20:11, Helder dos S. Alves <helder.jaspion(a)gmail.com&gt; wrote: