If you don't see a sign-in dialog on top right corner, you need to sign-in on the IdP first by pressing the button below.

Go to the IdP and Sign in

This RP only allows accounts from @allowed-domain.example domains. Other accounts will be filtered out.