MINIO_IDENTITY_OPENID_SCOPES_APP2="openid,groups"
MINIO_IDENTITY_OPENID_REDIRECT_URI_APP2="http://127.0.0.1:10000/oauth_callback"
MINIO_IDENTITY_OPENID_ROLE_POLICY_APP2="readwrite"

```
</details>

<details><summary>Example 2: Single claim based provider</summary>

Sample environment variables:

```
MINIO_IDENTITY_OPENID_DISPLAY_NAME="my openid"
MINIO_IDENTITY_OPENID_CONFIG_URL=http://myopenid.com/.well-known/openid-configuration

  }

  /**
   * Returns the values from each provided array combined into a single array. For example, {@code
   * concat(new float[] {a, b}, new float[] {}, new float[] {c}} returns the array {@code {a, b,
   * c}}.
   *
   * @param arrays zero or more {@code float} arrays
   * @return a single array containing all the values from the source arrays, in order

          currentTask = coordinatorTask
          taskRunner.notifyAll()
        }
      }

    // Let the coordinator process its interruption.
    runTasks()
  }

  /** Ask a single task to proceed. Used by the test thread only. */
  fun runNextTask() {
    taskRunner.assertLockNotHeld()

    taskRunner.withLock {
      val contextSwitchCountBefore = contextSwitchCount

/**
 * Factory for [calls][Call], which can be used to send HTTP requests and read their responses.
 *
 * ## OkHttpClients Should Be Shared
 *
 * OkHttp performs best when you create a single `OkHttpClient` instance and reuse it for all of
 * your HTTP calls. This is because each client holds its own connection pool and thread pools.

   * The returned client installs a default event listener that gathers debug information. This will
   * be logged if the test fails.
   *
   * This client is also configured to be slightly more deterministic, returning a single IP
   * address for all hosts, regardless of the actual number of IP addresses reported by DNS.
   */
  fun newClient(): OkHttpClient {
    var client = testClient
    if (client == null) {
      client =

import java.util.Arrays;
import java.util.Iterator;
import java.util.NoSuchElementException;
import org.jspecify.annotations.Nullable;

/**
 * Multiset implementation specialized for enum elements, supporting all single-element operations
 * in O(1).
 *
 * <p>See the Guava User Guide article on <a href=
 * "https://github.com/google/guava/wiki/NewCollectionTypesExplained#multiset">{@code Multiset}</a>.
 *
 * @author Jared Levy

        assertTrue(it.hasNext());
        assertSame(fe1, it.next());
        // After exception path, iterator should be exhausted
        assertFalse(it.hasNext());

        // Closing should send a single Smb2CloseRequest
        it.close();
        verify(tree).send(argThat((Request<?> r) -> r instanceof Smb2CloseRequest));
    }

    @Test

		}
	}
}

// lines joins the arguments together as complete lines.
func lines(a ...string) string {
	return strings.Join(a, "\n") + "\n"
}

// drain returns a single string representing the processed input tokens.
func drain(input *Input) string {
	var buf strings.Builder
	for {
		tok := input.Next()
		if tok == scanner.EOF {
			return buf.String()
		}

    /**
     * Removes the key/value of a match assertion all project REST tests for the matching subkey.
     * For example "match":{"_type": "foo"} to "match":{}
     * An empty match is retained if there is only a single key under match.
     *
     * @param subKey the key name directly under match to replace. For example "_type"
     */
    public void removeMatch(String subKey) {
        transformations.add(new RemoveMatch(subKey));

            jcifs.dcerpc.msrpc.MsrpcLookupSids rpc = (jcifs.dcerpc.msrpc.MsrpcLookupSids) msg;
            // Return success
            rpc.retval = NtStatus.NT_STATUS_SUCCESS;

            // Domains: single domain named TESTDOM
            lsarpc.LsarRefDomainList domains = new lsarpc.LsarRefDomainList();
            domains.count = 1;
            domains.max_count = 1;