name, _ := claims[displayNameClaim].(string)
		info.DisplayName = name
		info.DisplayNameClaim = displayNameClaim
	}
	if idClaim := globalIAMSys.OpenIDConfig.GetUserIDClaim(cfgName); idClaim != "" {
		id, _ := claims[idClaim].(string)
		info.UserID = id
		info.UserIDClaim = idClaim
	}

	return info
}

	pCfg, ok := r.ProviderCfgs[cfgName]
	if ok {
		return pCfg.UserReadableClaim
	}
	return ""
}

// GetUserIDClaim returns the user ID claim for the given configuration name, or "sub" if not set.
func (r Config) GetUserIDClaim(cfgName string) string {
	pCfg, ok := r.ProviderCfgs[cfgName]
	if ok {
		if pCfg.UserIDClaim != "" {
			return pCfg.UserIDClaim
		}
		return "sub"

			arn = dummyRoleARN
		}
		matchingCfgName, ok := roleArnMap[arn]
		if !ok {
			continue // skip if not part of the target config
		}
		var id string
		if idClaim := globalIAMSys.OpenIDConfig.GetUserIDClaim(matchingCfgName); idClaim != "" {
			id, _ = accessKey.Claims[idClaim].(string)
		}
		if !userSet.IsEmpty() && !userSet.Contains(accessKey.ParentUser) && !userSet.Contains(id) {
			continue // skip if not in the user list