My oauth provider doesn't include user groups in oidc profile response so I'd need to run an sql query against a database to get those groups. There seem to be many places in keycloak where you can run custom python code, would there happen to be for this use case too?
#Run custom code to get groups for a user on login
heady delta
spice oar
You can create an expression policy and bind it to the source enrollment or source login flow (or both) and then it’ll run when a user signs up or logs in via a source