external OIDC: can we restrict to a given domain ?

[eddycharly]

Hello, we are using google as an external oidc porvider.

Is there a possibility to allow authentication only for users belonging to a given domain ?

I think we could pass the hd=xxxx.com parameter in the query but i didn't see a way to configure that.
Or maybe there's a solution to do this server side ?