[keycloak-user] X509 Identity Brokering

Hi, Does Keycloak support some sort of Identity Brokering through X509? I managed to configure the X509 Client Certificate, but it only replaces the password, and requires the user to be already registered. What I would like to achieve is to automatically register the users who present a valid X509 Certificate. Is that possible? Best regards, Thiago Presa