Admin events for authentication through external OIDC provider

Hello,
I have a usecase where we would need to retrieve some admin events based on user, group or group membership actions.

When using Keycloak no problem to retrieve these events properly (e.g. when you create a user, an admin event is sent).

Now let’s say a user authenticate through an external OIDC provider.
The first login flow will create the user if it does not exist in Keycloak. But in that case no admin event (nor client event) is sent.
Is there a configuration somewhere that can be set to trigger these events ?
Do we need to create an authentication SPI and extend the flow to manage this usecase ?
Thank you for your help and response.
Kr,

Jordan