fix identity provider concept