denyLocalLogin
then unregister the default Umbraco provider, e.g. "Umb.AuthProviders.Umbraco" extension.