Filter by FreeIPA group

[nook2]

Hi!
I set up authentication via Keyloack and FreeIPA, how can I allow login only to a specific group in FreeIPA?

My config:
REMOTE_AUTH_ENABLED = True
REMOTE_AUTH_BACKEND = 'social_core.backends.keycloak.KeycloakOAuth2'
SOCIAL_AUTH_KEYCLOAK_KEY = 'netbox'
SOCIAL_AUTH_KEYCLOAK_SECRET = 'XXX'
SOCIAL_AUTH_KEYCLOAK_PUBLIC_KEY = XXX'
SOCIAL_AUTH_KEYCLOAK_AUTHORIZATION_URL = 'https://xxx/realms/xxx/protocol/openid-connect/auth'
SOCIAL_AUTH_KEYCLOAK_ACCESS_TOKEN_URL = 'https://xxx/realms/xxx/protocol/openid-connect/token'
SOCIAL_AUTH_KEYCLOAK_ID_KEY = 'email'
SOCIAL_AUTH_VERIFY_SSL = False
REMOTE_AUTH_HEADER = 'HTTP_REMOTE_USER'
REMOTE_AUTH_AUTO_CREATE_USER = True
REMOTE_AUTH_GROUP_SYNC_ENABLED = False
REMOTE_AUTH_DEFAULT_GROUPS = ['newuser']
REMOTE_AUTH_DEFAULT_PERMISSIONS = {}