# Enabling authentication on bearer-only client in admin console

**URL:** <https://forum.keycloak.org/t/enabling-authentication-on-bearer-only-client-in-admin-console/28357>\
**Category:** Securing applications\
**Tags:** admin-console, authentication\
**Created:** [October 16, 2024, 2:58pm UTC](https://forum.keycloak.org/t/enabling-authentication-on-bearer-only-client-in-admin-console/28357 "2024-10-16T14:58:12Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mashedpotatoes](https://avatars.discourse-cdn.com/v4/letter/m/90db22/32.png) [@mashedpotatoes](https://forum.keycloak.org/u/mashedpotatoes)\
**Post date:** [October 16, 2024, 2:58pm UTC](https://forum.keycloak.org/t/enabling-authentication-on-bearer-only-client-in-admin-console/28357/1 "2024-10-16T14:58:12Z")

</div>

Hi,  
I am facing the following issue with a bearer-only client for a resource server, which was set up in Keycloak 9.0.3:  
Now in version 21.1.1, I don’t find a way in the admin console to enable the client authentication for example - the whole capability config section is missing in the configuration of this client.

In contrast to similar clients created in Keycloak 21.1.1, a tooltip text next to the client’s name reads “This is a special OIDC type. This client only allows bearer token requests and cannot participate in browser logins.” and in Keycloak’s database `bearer_only = true` is set.

Is there any way to convert this type of client so the authentication flows become available?

---

<div class="post-metadata">

**Author:** ![mashedpotatoes](https://avatars.discourse-cdn.com/v4/letter/m/90db22/32.png) [@mashedpotatoes](https://forum.keycloak.org/u/mashedpotatoes)\
**Post date:** [October 21, 2024, 8:27am UTC](https://forum.keycloak.org/t/enabling-authentication-on-bearer-only-client-in-admin-console/28357/2 "2024-10-21T08:27:42Z")

</div>

As I did not want to mess around with the client configuration in the DB, I tried the REST API and it allows in fact to update the bearer-only value and then the capability config shows up in the admin console.  
Endpoints used:  
GET `{{authServerBaseUrl}}/admin/realms/{{authRealm}}/clients/:id`  
PUT `{{authServerBaseUrl}}/admin/realms/{{authRealm}}/clients/:id`