[keycloak-user] Caching user details in a custom User Storage Provider

Can I get a sanity check for this? I don't think my users are being retrieved from the cache. I'm using Keycloak 6.0.1 and doing proof of concept to use it as IDP for our application. So far I have a working User Storage Provider to call the existing API for user details and to authenticate users - I'm calling the token endpoint with a password grant-type and all is good. * I can see the initial search for email address works, and the user is added to the cache (at least the OnUserCache function is called) * the password matches and the user is authenticated * then there are many calls to get the user by ID - I think these are to get attributes for the token claims. These are not getting the details from the cache, as I can see hits on the existing API. So my questions are * should the user be coming from the cache? * is there a method I can override to confirm if the cache is being used? These are some logs from the keycloak service and the database adapter (both running as Docker containers). These logs are generated from the admin console when I click for user details. and the database API Thanks, James