Block access to consumer accounts
For each google.com request:
- Intercept the request.
- Add the HTTP header X-GoogApps-Allowed-Domains: followed by a comma-separated list with allowed domain names. Make sure that the list includes the domain you registered with Google Workspace and any secondary domains you added.