Access to teamcity outside the organization

[sapielsam]

Based on the problem described in the article

Steps to reproduce the problem:

1. Create a google account firstname.lastname+hacker@domain.org (this account does not belong to the organization and is not managed by it in any way.)
2. Try to log in to teamcity with this account.

The actual result: A new account with username: firstname.lastname+hacker@domain.org is created and given default permissions.

Is it possible to add a check for jwt claim hd or via getHostedDomain to check if the user belongs to an organization?

[sapielsam]

I think the problem here