When you add external identity providers to your Keycloak Realm, it retrieves tokens from your identity providers, then sends back to your application a new access_token from your Keycloak Realm.
What about the original token ?
If I use Facebook as an identity provider, can we get the original Facebook token to call Facebook API ?
From external IDP token to Keycloak token : token_exchange. Now, we will take a look at the opposite operation.| See more
Any question? Want more information? Follow us on twitter or you can reach out to us via email.