return providerPrefix // this is true for certificate and custom providers
		}
		return madmin.OpenIDProvider // openid users are already hashed, so no separator
	}

	return madmin.BuiltinProvider // default to internal
}

// getProviderInfoFromClaims - returns the provider info from the claims.
func populateProviderInfoFromClaims(claims map[string]any, provider string, resp *madmin.InfoAccessKeyResp) {
	resp.UserProvider = provider

        FessSecurityResourceProvider provider1 = new FessSecurityResourceProvider(inver1, oneWay1);
        FessSecurityResourceProvider provider2 = new FessSecurityResourceProvider(inver2, oneWay2);

        assertNotSame(provider1, provider2);
        assertEquals(inver1, provider1.providePrimaryInvertibleCryptographer());
        assertEquals(inver2, provider2.providePrimaryInvertibleCryptographer());

                        InetSocketAddress address,
                        RdmaProvider provider) throws IOException {
        super(context, address.getAddress(), address.getPort());
        
        this.provider = provider;
        this.rdmaConnection = provider.createConnection(address, getLocalAddress());
        this.bufferManager = new RdmaBufferManager(provider);
        this.credits = new RdmaCredits();
        

        FessJsonResourceProvider provider1 = new FessJsonResourceProvider();
        FessJsonResourceProvider provider2 = new FessJsonResourceProvider();

        assertNotSame(provider1, provider2);

        // Both instances should have the same behavior
        assertEquals(provider1.isNullsSuppressed(), provider2.isNullsSuppressed());
        assertEquals(provider1.isPrettyPrintSuppressed(), provider2.isPrettyPrintSuppressed());

        assertNotNull(provider2);
        assertNotNull(provider3);

        // Each should be a different instance
        assertNotSame(provider1, provider2);
        assertNotSame(provider2, provider3);
        assertNotSame(provider1, provider3);
    }

    // Test with special characters in time adjustment string
    public void test_specialCharactersInTimeAdjustment() {

        // Try providers in order of preference
        List<RdmaProvider> providers = Arrays.asList(new DisniRdmaProvider(), // InfiniBand/RoCE - highest performance
                new TcpRdmaProvider() // TCP fallback - always available
        );

        for (RdmaProvider provider : providers) {
            if (provider.isAvailable()) {
                log.info("Selected RDMA provider: {}", provider.getProviderName());

        // When
        DfFinalTimeZoneProvider provider = curtainBeforeHook.createFinalTimeZoneProvider();

        // Then
        TimeZone first = provider.provide();
        TimeZone second = provider.provide();
        assertSame("Provider should return the same TimeZone instance", first, second);
    }

    public void test_createFinalTimeZoneProvider_toStringContainsTimeZoneId() {
        // When

    /**
     * Get provider name (e.g., "InfiniBand", "iWARP", "RoCE", "TCP Fallback")
     *
     * @return human-readable provider name
     */
    String getProviderName();

    /**
     * Get maximum message size supported by this provider
     *
     * @return maximum message size in bytes
     */
    int getMaxMessageSize();

    /**

**NOTE**: When configuring multiple OpenID based authentication providers on a MinIO cluster, any number of Role Policy based providers may be configured, and at most one JWT Claim based provider may be configured.

<details><summary>Example 1: Two role policy providers</summary>

Sample environment variables:

```
MINIO_IDENTITY_OPENID_DISPLAY_NAME="my first openid"

/**
 * Unit tests for TCP RDMA provider
 */
public class TcpRdmaProviderTest {

    private TcpRdmaProvider provider;

    @BeforeEach
    public void setUp() {
        provider = new TcpRdmaProvider();
    }

    @Test
    public void testIsAvailable() {
        assertTrue(provider.isAvailable(), "TCP provider should always be available");
    }

    @Test