The problem I am trying to solve is where we have multiple IDPs coming into our application edge from various authentication sources. What I want to do is to use token exchange to swap this token, for a token which can be understood at any level of our micro service architecture. I envision the token will simply be for identity only. The overhead of trying to build multiple IDPs into every component within our system is proving a big challenge.
Can you advise if the token exchange mechanism is suitable for this? At least at RFC level it appears to be suitable.
We have been experimenting with spring auth server for the last few months.