Force Users to Use SSO (Openid)

Hi All,

It could be a simple answer but I couldn’t find and answer any where.

Is there away to force users to use SSO (Opendi connect app + AzureAD) and prevent them from using their local accounts? if possible can we restrict it for specific group?

Currently I can login with both local and SSO.

version: 10.9.1 (stable)
openid: 2.1.1

Thank you in advance.