look for a correct token

templates/create_workspace_client.json.j2

@@ -188,6 +188,23 @@
 			"caseExpression": "($.status === 406 ? 'create' : 'exists')",
 			"decisionCases": {
 				"create": [
+					{
+						"name" : "pyrest",
+						"taskReferenceName" : "upgrade_orchestrator_token_to_uma",
+						"type" : "SIMPLE",
+						"inputParameters" : {
+							"url" : "{{ keycloak }}/{{ keycloak_realm }}/protocol/openid-connect/token",
+							"method" : "POST",
+							"headers" : {
+								"Accept" : "application/json",
+								"Authorization" : "Bearer ${authorize.output.body.access_token}"
+							},
+							"body" : {
+								"audience" : "${init.input.root_vo}",
+								"grant_type" : "urn:ietf:params:oauth:grant-type:uma-ticket"
+							}
+						}
+					},
 					{
 						"name" : "pyrest",
 						"taskReferenceName" : "create_jcr_account",
@@ -196,7 +213,7 @@
 							"url" : "${init.input.storagehub}/workspace/users",
 							"method" : "POST",
 							"headers" : {
-								"Authorization" : "Bearer ${authorize.output.body.access_token}"
+								"Authorization" : "Bearer ${upgrade_orchestrator_token_to_uma.output.body.access_token}"
 							},
 							"body" : {
 								"user" : "${get_service_account_user.output.body.username}",