I'm using a DB to store the users and roles. Users can sign up for a new account on one page as no authentication is required for this. My original idea was to add a simple user management to the IDP. Just like the sign up page, this would include a page to update a user's details (e.g. change password, change name, delete user) using JSF 2. This issue was one of the problems I encoutered there as once logged in, all requests were intercepted by PL.