Domain Control - Block accounts and instances from being created. But DONT capture users

We have an IDP solution with Miro and i would like the ability to block other instances from being created with our domain but NOT capture the users. If they try, i would like them to be rerouted to the default ask for access options where you can choose to email the admins, send a ticket to service desk or the url to request an account.