Couldn't login to OpenID Connect IDP with groups sync when IDP name includes spaces.

Note, if the the groups sync is removed from the OpenID Connect IDP configuration, then Console login succeeds without issue.

Found in 4.20.0-0.nightly-2025-05-29-041615.
Then checked in earlier release 4.14.0-0.nightly-2025-05-28-142903, hit same.

Always

1. Configure IDPs as below. Note it has groups sync when OpenID Connect IDP name includes spaces:
$ oc edit oauth cluster
...
spec:
  identityProviders:
  - htpasswd:
      fileData:
        name: htpass-secret
    mappingMethod: claim
    name: flexy-htpasswd-provider
    type: HTPasswd
  - mappingMethod: claim
    name: Microsoft Entra ID
    openID:
      claims:
        email:
        - email
        groups:
        - groups
        name:
        - name
        preferredUsername:
        - preferred_username
      clientID: 3afe47eb-XXXXXXXX
      clientSecret:
        name: microsoft-entra-id-secret
      extraScopes:
      - email
      - profile
      issuer: https://login.microsoftonline.com/604XXXXXXXX/v2.0
    type: OpenID
2. Log in to OpenShift Console

Login to OpenShift Console failed. The page returned:
An authentication error occurred.

Check oauth-openshift pods' logs, found:
2025-05-30T12:50:06.681068951Z E0530 12:50:06.681016       1 errorpage.go:28] AuthenticationError: Group.user.openshift.io "xxia-testgroup1" is invalid: metadata.annotations: Invalid value: "oauth.openshift.io/idp.Microsoft Entra ID": name part must consist of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character (e.g. 'MyName',  or 'my.name',  or '123-abc', regex used for validation is '([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9]')

Sorry my bad I didn't discover this, before.