Implement origin validation during authentication.
Meaning, a user can only be authenticated by the UAA authentication manager if the user was originated in the UAA (not LDAP or Keystone or SAML).