Hi all,
All our portal users are on AzureAD and we only want users who already have a record in the contact table to be able to access the portal. We want AzureAd to be the only allowed method of authentication and so it is the only one enabled and set to default, this works well where the user exists in the contact table (it is matching on email and creating the external identity relationship from this). However, if the user is not found (no match on email), then the portal (SYSTEM user) creates a new contact. Is there anyway to block the portal from creating this new contact record and instead telling the user this service is not accessible - we are not too bothered if the error message is not pretty, we just don't want contacts created.
Thanks in advance.