diff --git a/repository/src/main/java/de/acosix/alfresco/keycloak/repo/token/AccessTokenClient.java b/repository/src/main/java/de/acosix/alfresco/keycloak/repo/token/AccessTokenClient.java
index 80e7df9..4c06cc0 100644
--- a/repository/src/main/java/de/acosix/alfresco/keycloak/repo/token/AccessTokenClient.java
+++ b/repository/src/main/java/de/acosix/alfresco/keycloak/repo/token/AccessTokenClient.java
@@ -154,6 +154,7 @@ public class AccessTokenClient
                 formParams.add(new BasicNameValuePair(OAuth2Constants.GRANT_TYPE, OAuth2Constants.TOKEN_EXCHANGE_GRANT_TYPE));
                 formParams.add(new BasicNameValuePair(OAuth2Constants.AUDIENCE, client));
                 formParams.add(new BasicNameValuePair(OAuth2Constants.REQUESTED_TOKEN_TYPE, OAuth2Constants.REFRESH_TOKEN_TYPE));
+                formParams.add(new BasicNameValuePair(OAuth2Constants.SUBJECT_TOKEN, accessToken));
                 this.processScopes(scopes, formParams);
             });
             final VerifiedTokens verifiedTokens = this.verifyAccessTokenResponse(response, client);