Does Harbor OIDC integration support allowing only members of a specific group to log in?

[contributorr]

I’ve configured Harbor’s OIDC integration to use a group claim and set an OIDC Group Filter. However, Harbor still allows any authenticated user (to the provider) to log in, even if they’re not in the specified group.

Is there a way to configure Harbor so that only users who belong to a particular group in the OIDC provider can access Harbor at all, rather than just mapping group memberships once they’re already logged in?