Keycloak: How to hook into Google Identity Provider to add roles programmatically

Question

We use Keycloak with google identity provider to authenticate. When a user log in using google, I want to hook into the flow to add some roles for that user session.

What