It is extremely dangerous to carelessly treat email addresses and user names as regular expressions.
a.b@example.com will pass authentication as axb@example.com.
A simpler method is needed to avoid such misconfigurations.
For example, it should be possible to specify the domain for Google and the org or team for GitHub.