FYI: Starting in 2.3, there will be a number of user SPIs and APIs that will be refactored or deprecated. UserModel, UserFederationProvider, UserCredentialModel, PasswordHashProvider, and UserFederationManager are being refactored. UserFederationProvider is also being @Deprecated. Code will break, and you'll have to figure out how to start using the new UserStorageProvider SPI, or update UserFederationProvider implementation. You'll start seeing changes pop up in master over the next few weeks. Regards, Bill