No need to require credentials/STS from providers