3 docs tagged with "token-exchange"

Access Gateway integrates with Keycloak for token validation and exchange, and with the Keymate Authorization Decision Provider for fine-grained permission evaluation.

How Keymate embeds organizational context into access tokens through a token exchange mechanism that binds sessions to department assignments.

How Keymate switches department context by revoking the current token and issuing a new department-scoped one