Limit access to groups / UPN

For groups to work the Microsoft Entra application will need Group.Read.All permission
Start the Service Scheduler install and upgrade wizard
Select settings
Locate the settings sso_entra_allow_groups and sso_allow_upn_suffix
To limit access to certain group, add the group names separated by the ";" character.
To limit to user UPN suffix enter the userPrincipalName suffix