- changed the logic for getting the identity provider to using the active one because a using failed identity provider does not help