Implement action after user authentication is completed

Is there a way to create an addon functionality for keycloak that takes action after the user is authenticated (and userSessionModel exists)? For instance, I want to logout a user from a remote IDP after the user has successfully been authenticated in KC!

I tried to create an authenticator but at this point there is no userSessionModel (it is always null).

Any ideas?