[keycloak-user] Custom IdentityProvider lifecycle