I needed to migrate accounts from an old database to authenticate with Keycloak, and I implemented my own provider of the Authentication SPI, which worked fine.

Now what should I do if I need to migrate the roles from those accounts aswell? Is there a suggested flow that I should follow?

Thanks,
--