Hi, I have created a userStorageProvider in keycloak's SPI by implementing several interfaces as follows: public class MigrationStorageProvider implements UserStorageProvider,CredentialProvider, UserLookupProvider, CredentialInputValidator, CredentialInputUpdater { But to my surprise the only method which keycloak calls during login flow is "getUserByUsername()". It does not call "isValid()" Method. The problem is that I don't have access to CredentialInput to verify user's password in "getUserByUsername()". Anyone knows what I am doing wrong? Thanks, Soroush Shirali Software Developer [ph] 08 8232 2828 [at] Soroush.Shirali(a)flexigroup.com.au [image003] Please consider the environment before printing this e-mail The information contained in this email is confidential. It is intended only for the stated addressee(s) and access to it by any other person is unauthorised. If you are not an addressee, you must not disclose, copy or circulate this information. Such unauthorised use may be unlawful. If you have received this email in error, please inform FlexiGroup Limited immediately and delete it and all copies from your system. While FlexiGroup Limited makes every effort to keep our network free from viruses we take no responsibility for any computer virus which might be transferred by way of this email. The views expressed in this email are those of the sender and may not be representative of the views of FlexiGroup Limited or any subsidiary of the group