diff --git a/internal/config/identity/openid/openid.go b/internal/config/identity/openid/openid.go
index 44da71923..3f076af96 100644
--- a/internal/config/identity/openid/openid.go
+++ b/internal/config/identity/openid/openid.go
@@ -506,14 +506,13 @@ func (r *Config) GetSettings() madmin.OpenIDSettings {
 	if !r.Enabled {
 		return res
 	}
-
+	h := sha256.New()
 	for arn, provCfg := range r.arnProviderCfgsMap {
 		hashedSecret := ""
 		{
-			h := sha256.New()
+			h.Reset()
 			h.Write([]byte(provCfg.ClientSecret))
-			bs := h.Sum(nil)
-			hashedSecret = base64.RawURLEncoding.EncodeToString(bs)
+			hashedSecret = base64.RawURLEncoding.EncodeToString(h.Sum(nil))
 		}
 		if arn != DummyRoleARN {
 			if res.Roles == nil {