I need to connect IRIS to a third-party FHIR server which in turn is connected to Keycloak.
For machine-to-machine communications, client credentials grants should be used. I don't know why exactly but the FHIR server requires access tokens to contain the "openid" scope, otherwise it returns 401 (unauthorized).
.png)