diff --git a/internal/config/identity/openid/openid.go b/internal/config/identity/openid/openid.go
index 523891fd8..e5f59ba40 100644
--- a/internal/config/identity/openid/openid.go
+++ b/internal/config/identity/openid/openid.go
@@ -509,13 +509,11 @@ func (r *Config) GetSettings() madmin.OpenIDSettings {
 		return res
 	}
 	h := sha256.New()
+	hashedSecret := ""
 	for arn, provCfg := range r.arnProviderCfgsMap {
-		hashedSecret := ""
-		{
-			h.Reset()
-			h.Write([]byte(provCfg.ClientSecret))
-			hashedSecret = base64.RawURLEncoding.EncodeToString(h.Sum(nil))
-		}
+		h.Write([]byte(provCfg.ClientSecret))
+		hashedSecret = base64.RawURLEncoding.EncodeToString(h.Sum(nil))
+		h.Reset()
 		if arn != DummyRoleARN {
 			if res.Roles == nil {
 				res.Roles = make(map[string]madmin.OpenIDProviderSettings)