Authorization Code Grant flow with unlimited number of clients

given: an internet service with lots of subdomains. Each subdomain is a keycloak client. All subdomains talk to the same java web server.

the challenge: how I could design the system such, that server side could authenticate users without configuring client secrets for each of the subdomain?