Assigning user to a role in keycloak on attribute change

Question

I\'ve been using keycloak as Identity provider.

There\'s a need to show OTP form when current IP is different from last-ip of user (saved in user-attribute).

What