title: Issuing "API keys" using Keycloak
body: <p>My setup has three components:</p>
  
  <ul>
  <li>A backend application (Python/Flask)</li>
  <li>A frontend application (VueJS)</li>
  <li>Keycloak</li>
  </ul>
  
  <p>The frontend will use Keycloak to let users sign in and use the access tokens to authenticate requests to the backend. So far so good. </p>
  
  <p>Now I want third party applications to be able to make authenticated requests against the backend and I am wondering how that can be realized using Keycloak? My idea is to issue a new set of credentials for each customer. Their application then talks to Keycloak to get access tokens. I can then use Keycloak to manage access control for all users of the API.</p>
  
  <ul>
  <li>How would a 3rd party app be represented in Keycloak - client? user? ...?</li>
  <li>Are there best practices for this kind of use case?</li>
  </ul>