[Security] use strings for chained user providers

[Security] use strings for chained user providers #23351