grant permission for the exchange token

epam · Nov 9, 2023 · 54c1586 · 54c1586
1 parent 24fe986
commit 54c1586
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/docs/keycloak.md b/docs/keycloak.md
@@ -1,5 +1,8 @@
 ## KeyCloak Configuration
 
+Auth-helper uses token-exchange API in KeyCloak for access to external IdP. You need to grant permissions for the exchange
+before running auth-helper: https://www.keycloak.org/docs/latest/securing_apps/#_client_to_client_permission
+
 ### Identity Provider
 Go to the target realm in KeyCloak and open "Identity Providers". Choose the tab "Mappers" and create two mappers: