Cloudflare JWT token exchange for keycloak backend

I have an application which uses keycloak to grant access to the application. Now I moved the application behind cloudflare and using keycloak as Identity Provider. Once the user tries to access the application, cloudflare is redirecting the user to keycloak, once the user is authorized, it’s redirecting the user to the application. However, the user has to login again to the application even though he has already authenticated with keycloak. So I was wondering whether I can use keycloak token exchange (Exchange JWT token from Cloudflare to another keycloak access token for the application) to avoid the double login.