gRegorcarrvo, Do you want to restrict URLs to certain domains signing in? If so I think you only need the `profile` scope and no access token needs to be involved. Once they authorize, you have their domain as the `me` and can restrict pages based on that
