This RP onlys allow users to sign in with @allowed-domain.example. Try signing in with demo@allowed-domain.example.

Sign in with IdP

Try to sign in with a different account, e.g, demo@example. You should see this account filtered out.