You can loop over the list of supported providers.

Even better you can mark those OPs that support JWTs. Then you have two cases:

• AT is a jwt => Use the provider specified
• AT is not a jwt => cycle over all non-jwt OPs