The current Identity provider configuration allows all users from the identity provider can log into the identity broker.

Example: Setting up GitHub as an identity provider with keycloak. But, it allows all GitHub users to authenticate with keycloak.

Proposal: Addition of configuration which allows setting up rules for the authorization.

• Only users with roles: xyz are allowed
• Only users with attribute(token claim) are allowed

Use-case: Github users belonging to Organization A can access the keycloak instance via identity provider flow.