3 docs tagged with "token-exchange"

Access Gateway integrates with Keycloak for token validation and exchange, and with the Keymate Authorization Decision Provider for fine-grained permission evaluation.

How Keymate selects organization context per authenticated client session and projects a minimal, versioned token claim.

How Keymate changes organization context for browser and confidential-client profiles without conflating token rotation with immediate access-token revocation.