Hi all,

I’m performing token exchange between two separate Keycloak servers:

• Keycloak A issues the token
• Keycloak B exchanges it
• Keycloak B has Keycloak A registered as an OIDC Identity Provider
• Version: Keycloak 24.0.5

The flow currently works, but there is some uncertainty regarding official support. It appears that:

• Token Exchange was a preview feature until Keycloak 26.2
• In 26.2+, token exchange is “fully supported”
• Cross-realm or cross-Keycloak token exchange may not be officially supported

This created uncertainty.

My questions:

1. Is cross-Keycloak token exchange officially supported in v24.0.5?
2. Has this behavior changed in v26.2+?
3. If cross-Keycloak token exchange is not supported, what is the recommended approach for exchanging tokens issued by another Keycloak instance?

Any clarification or official references would be greatly appreciated.

Thanks!