Hi All, Any idea how should I proceed with this ? Any pointers or document ? Regards ---------- Forwarded message --------- From: Sandeep Rai <raisandeepkmr(a)gmail.com&gt; Date: Thu, 31 May 2018, 02:25 Subject: Modify roles in Token after user login SPI To: <keycloak-user(a)lists.jboss.org&gt; Hi Community, I'm trying to add more roles into the token after the token has been generated following the isValid() return of the Authentication SPI. I have a application which has SMS otp functionality. After the user has verified the OTP I want to grant more roles to the user by adding those roles into the token. But how do I modify the existing token or even renew it with new roles ? Is there a endpoint I can use to do so ? Or anyother ProviderInterface that I can use to achieve this ? Regards