MINIO_IDENTITY_LDAP_LOOKUP_BIND_DN          (string)    DN for LDAP read-only service account used to perform DN and group lookups
MINIO_IDENTITY_LDAP_LOOKUP_BIND_PASSWORD    (string)    Password for LDAP read-only service account used to perform DN and group lookups
MINIO_IDENTITY_LDAP_USER_DN_SEARCH_BASE_DN  (list)      ";" separated list of user search base DNs e.g. "dc=myldapserver,dc=com"

     * <code>possibleNTDomainOrWorkgroup</code> parameter is <code>true</code> an
     * additional name query will be performed to locate a master browser.
     *
     * @param hostname the hostname to resolve
     * @param possibleNTDomainOrWorkgroup if true, perform additional master browser lookup
     *
     * @return the first resolved address

# Auto detect text files and perform LF normalization
* text=auto

# Known text files
*.java text
*.xml text
*.yml text
*.md text
*.sh text
*.css text
*.txt text

# Known binary files

        }

        log.debug("Starting reconnection for handle: {} (cause: {})", handleInfo.getPath(), cause.getMessage());
        return attemptReconnect(handleInfo, 0, cause);
    }

    /**
     * Perform a single reconnection attempt
     * @param info the handle information
     * @param attempt the current attempt number (0-based)
     * @param originalCause the original exception that triggered reconnection

	InUse(ctx context.Context) (bool, error)
}

const probeObject = "probeobject"

// checkWarmBackend checks if tier config credentials have sufficient privileges
// to perform all operations defined in the WarmBackend interface.
func checkWarmBackend(ctx context.Context, w WarmBackend) error {
	remoteVersionID, err := w.Put(ctx, probeObject, strings.NewReader("MinIO"), 5)
	if err != nil {

     * @return received data buffer, or null if timeout
     * @throws IOException if receive fails
     */
    public abstract ByteBuffer receive(int timeout) throws IOException;

    /**
     * Perform RDMA read operation
     *
     * @param localRegion local memory region to read into
     * @param remoteAddress remote memory address
     * @param remoteKey remote memory key

    /**
     * Indicates a request for SSO metadata, which is typically used for
     * configuration and discovery in protocols like SAML.
     */
    METADATA,

    /**
     * Indicates a request to perform a logout operation, terminating the
     * user's SSO session.
     */
    LOGOUT;

# Auto detect text files and perform LF normalization
*        text=auto

*.java   text diff=java
*.html   text diff=html
*.css    text
*.js     text
*.sql    text
*.jar    binary

Using the above `id_token` we can perform an STS request to MinIO to get temporary credentials for MinIO API operations. MinIO STS API uses [JSON Web Key Set Endpoint](https://docs.wso2.com/display/IS541/JSON+Web+Key+Set+Endpoint) to validate if JWT is valid and is properly signed.

/**
 * ICUNormalizer is a class that implements the Normalizer interface and provides
 * functionality to normalize text using ICU4J's Transliterator.
 *
 * <p>This class uses a specified Transliterator to perform text normalization.
 * The Transliterator is initialized with a given ID during the construction of
 * the ICUNormalizer instance.</p>
 *
 * <p>Example usage:</p>
 * <pre>