protected boolean isDelegatedClientAuthorizedForTenant(final String clientName, final TenantDefinition tenantDefinition) {
        val allowedProviders = tenantDefinition.getDelegatedAuthenticationPolicy().getAllowedProviders();
        val allowedByTenant = StringUtils.isBlank(clientName) || allowedProviders == null
            || allowedProviders.isEmpty() || allowedProviders.contains(clientName);
        LOGGER.debug("Tenant [{}] allows for delegated authentication with provider [{}]: [{}]", tenantDefinition.getId(), clientName,
            BooleanUtils.toStringYesNo(allowedByTenant));
        return allowedByTenant;
    }
This is {@link BaseDelegatedClientIdentityProviderAuthorizer}.

@author Misagh Moayyed
@since 6.6.0
support/cas-server-support-pac4j-core/src/main/java/org/apereo/cas/pac4j/client/authz/BaseDelegatedClientIdentityProviderAuthorizer.java