Sorry. I just spent some more time reading the User Storage SPI documentation and it appears to be exactly what I need. Please let me know if this the appropriate approach or if there are alternate more suitable approaches. -sud On January 18, 2018 at 12:33:23 PM, Sud Ramasamy (to_sud(a)yahoo.com) wrote: Hi, We have a need to intercept the existing form based login authentication for a realm and instead of going to the Keycloak database to validate username/password we need to invoke a REST endpoint with the username/password combination to authenticate the user. Using the User Storage SPI is not an option since it integrates at the JPA layer. We will need to integrate via an authentication REST API hosted externally to RH-SSO.  Please provide some of the options that are available to us to accomplish. Appreciate the help. -sud