diff --git a/keycloak/realm-export.json b/keycloak/realm-export.json
index 270f30b..a28e29e 100644
--- a/keycloak/realm-export.json
+++ b/keycloak/realm-export.json
@@ -229,6 +229,18 @@
       "fullScopeAllowed": true,
       "nodeReRegistrationTimeout": -1,
       "protocolMappers": [
+        {
+          "name": "nextcloud-audience",
+          "protocol": "openid-connect",
+          "protocolMapper": "oidc-audience-mapper",
+          "consentRequired": false,
+          "config": {
+            "included.client.audience": "nextcloud",
+            "access.token.claim": "true",
+            "id.token.claim": "false",
+            "introspection.token.claim": "true"
+          }
+        },
         {
           "name": "sub",
           "protocol": "openid-connect",
@@ -308,7 +320,6 @@
         "phone",
         "offline_access",
         "microprofile-jwt",
-        "token-exchange-nextcloud",
         "notes:read",
         "notes:write",
         "calendar:read",