We can delegate the authorization of users to any Single Sign-on (SSO) solution supporting at least one of the following protocol:
We use a tool for that, called Keycloak to perform this securely. Keycloak handles the SSO, the domain verification and the automatic user provisioning with group restrictions.