How are external accounts handled?

Currently the system support "external accounts" (users who never studied at the Ecole polytechnique), in order to be compatible with polytechnique.net. These users can currently use the authentication system in order to log in in relying parties website. There may be a need to restrict such an access by default, and enable it for specific relying parties. How do we do this?