diff --git a/packages/auth/src/keycloak.js b/packages/auth/src/keycloak.js
index bc0b3cf92c989ebd44f8d553f3d0ee2d6a0b6804..206856e949c8657c669c91584085c131677f7dc1 100644
--- a/packages/auth/src/keycloak.js
+++ b/packages/auth/src/keycloak.js
@@ -94,7 +94,11 @@ export class KeycloakWrapper extends EventTarget {
             return;
         this._initDone = true;
 
-        const options = {promiseType: 'native'};
+        const options = {
+            promiseType: 'native',
+            pkceMethod: 'S256'
+        };
+
         if (this._silentCheckSsoUri) {
             options['onLoad'] = 'check-sso';
             options['silentCheckSsoRedirectUri'] = this._silentCheckSsoUri;