diff --git a/services/keycloak/deployment.yaml b/services/keycloak/deployment.yaml
index 0ead0a8..e632d7d 100644
--- a/services/keycloak/deployment.yaml
+++ b/services/keycloak/deployment.yaml
@@ -103,6 +103,8 @@ spec:
               value: xforwarded
             - name: KC_HTTP_ENABLED
               value: "true"
+            - name: KC_FEATURES
+              value: token-exchange
             - name: KC_HTTP_MANAGEMENT_PORT
               value: "9000"
             - name: KC_HTTP_MANAGEMENT_BIND_ADDRESS