diff --git a/service/cmd/keycloak_data.yaml b/service/cmd/keycloak_data.yaml
index ef54501c48..e26fc036af 100644
--- a/service/cmd/keycloak_data.yaml
+++ b/service/cmd/keycloak_data.yaml
@@ -77,10 +77,23 @@ realms:
           name: cli-client
           serviceAccountsEnabled: false
           publicClient: true
+          directAccessGrantsEnabled: true
           redirectUris:
             - 'http://localhost:*'
           protocolMappers:
             - *customAudMapper
+      - client:
+          clientID: opentdf-public
+          enabled: true
+          name: opentdf-public
+          serviceAccountsEnabled: false
+          publicClient: true
+          directAccessGrantsEnabled: true
+          redirectUris:
+            - 'http://localhost:*'
+            - 'http://127.0.0.1:*'
+          protocolMappers:
+            - *customAudMapper
     users:
       - username: sample-user
         enabled: true