Customers with advanced SSO requirements can now restrict the email domains to login via their Auth0 service provider (Okta, Onelogin etc.).