Securing Token Endpoint by Client IPs

Hi, this is not possible out of the box with Keycloak, but take a look at Limit login of a specific users from whitelist IP address for a look into how you could write a SPI to do that.