[keycloak-user] Identifying a federated user

Hi all, Can someone point me to the class where the logic to identify whether the current user is federated/external IdP user is written? I am trying to understand how an external LDAP user is fetched when the credentials are passed through the token endpoint. I started looking from TokenEndpoint.java and reached till StorageId.java where the external username in the format “f:{provider id}:{external id}“ is calculated and set, but somehow not getting to the logic where the external user is identified at the first place. Any help will be appreciated. Thanks! Regards, Ajinkya Thakare