aspnetcore: AddIdentity extension blocks JwtBearerOptions configure

ASP.NET Core 3.1.0 + IdentityServer4. Application generated from OOB template “Web Application -> Angular” with build-in user authentication option

I want to combine Customize the API authentication handler (link 1) and Identity model customization in ASP.NET Core (link 2)

This is default configuration of the template + changes from link 1:

// startup.cs, only valuable lines  are shown
...
services.AddDefaultIdentity<ApplicationUser>(options => options.SignIn.RequireConfirmedAccount = true)
    .AddEntityFrameworkStores<ApplicationDbContext>();
....
services.AddAuthentication().AddIdentityServerJwt();
services.Configure<JwtBearerOptions>(
     IdentityServerJwtConstants.IdentityServerJwtBearerScheme,
     options =>
     {
        // breakpoint on next line, it works
        var onTokenValidated = options.Events.OnTokenValidated;
       ...
     });

This works just perfect.

Now let’s add code from link 2:

// startup.cs, only valuable lines are shown
...
services.AddIdentity<ApplicationUser, ApplicationRole>(options => options.SignIn.RequireConfirmedAccount = true)
                .AddEntityFrameworkStores<ApplicationDbContext>()
                .AddDefaultUI()
                .AddDefaultTokenProviders();
....
services.AddAuthentication().AddIdentityServerJwt();
services.Configure<JwtBearerOptions>(
     IdentityServerJwtConstants.IdentityServerJwtBearerScheme,
     options =>
     {
        // breakpoint on next line, never hits
        var onTokenValidated = options.Events.OnTokenValidated;
       ...
     });

This just doesn’t work. The option lambda never called, breakpoint never hits.

Even more, I tried to implement same with IConfigureNamedOptions<JwtBearerOptions> and services.AddTransient<IConfigureOptions<JwtBearerOptions>, MyJwtBearerConfigurator> - same result, works with AddDefaultIdentity<TUser>, but MyJwtBearerConfigurator never executed with ```AddIdentity<TUser, TRole>``

Any ideas why??