Wrt to our application, we are using the Keycloak 15.1.0 docker based implementation.
Extended SPI RemoteUserStorageFactory to take to third party api for validation .
We find the transformaccessToken Method implemented for CustomProtocolMapper is getting called 2times for every Request
public class CustomProtocolMapper extends AbstractOIDCProtocolMapper
implements OIDCAccessTokenMapper, OIDCIDTokenMapper {
public AccessToken transformAccessToken(AccessToken token, ProtocolMapperModel mappingModel,
KeycloakSession session, UserSessionModel userSession, ClientSessionContext clientSessionCtx)