So I have a website hosted on Azure Webapp. It generates a default domain https://xxx.azurewebsites.net and I made a custom domain https:xxx.com

Now my question is, how do I only allow users who are signed in with emails [email protected] to access both domains and restrict all other access?

I tried to go to Authentication => Add identity provider => proceeded to add client id and secret, but then any user can access the website as long as they are signed in to google