@Vishal_Jain03 Approach3: If you don't want to create test user, you can merge both approaches. Instead of setting login-token in response object, set JWT header. Once the custom auth handler code completes then request will come to sling filter with valid JWT header. Validate the JWT and user grou...