For example, add the access control header to Keycloak, like: Access-Control-Allow-Origin [URL-of Dashy] Note that for requests that transport sensitive info like credentials, setting the accept ...