Hi @unique-sandro and @Arttii, was on vacation so sorry for the late reply, but can you have a look here https://zitadel.com/docs/guides/manage/customize/behavior, it's currently only for PostCreation, but something like this would then also solve you problem if it would be available for PostAuthentication right? The logic is a bit different as we can not expect that no Authorizations are existing as compared to the freshly created user.