diff --git a/changelogs/fragments/6763-keycloak-auth-provider-choices.yml b/changelogs/fragments/6763-keycloak-auth-provider-choices.yml
new file mode 100644
index 0000000000..b577b4bb91
--- /dev/null
+++ b/changelogs/fragments/6763-keycloak-auth-provider-choices.yml
@@ -0,0 +1,2 @@
+minor_changes:
+  - keycloak_authentication - added provider ID choices, since Keycloak supports only those two specific ones (https://github.com/ansible-collections/community.general/pull/6763).
diff --git a/plugins/modules/keycloak_authentication.py b/plugins/modules/keycloak_authentication.py
index 966d5b20f7..b79bcbb13c 100644
--- a/plugins/modules/keycloak_authentication.py
+++ b/plugins/modules/keycloak_authentication.py
@@ -43,6 +43,7 @@ options:
     providerId:
         description:
             - C(providerId) for the new flow when not copied from an existing flow.
+        choices: [ "basic-flow", "client-flow" ]
         type: str
     copyFrom:
         description:
@@ -331,7 +332,7 @@ def main():
     meta_args = dict(
         realm=dict(type='str', required=True),
         alias=dict(type='str', required=True),
-        providerId=dict(type='str'),
+        providerId=dict(type='str', choices=["basic-flow", "client-flow"]),
         description=dict(type='str'),
         copyFrom=dict(type='str'),
         authenticationExecutions=dict(type='list', elements='dict',