[keycloak-user] Restrict access to client based on Group policy

Hi, is there an option to avoid access to a client after a successful login at the external idp? I don't want tpo provide access to everyone. I created a group and want that only who are in this group can continue using the service. Any support on this? Thank you. Sofiane.