Hi @baoyuan,
Thanks for reaching out to the Auth0 Community!
I recommend using a Post-Login Action to prevent your users from logging in.
Please check out our Verifying users in Actions FAQ for details.
May I help you with anything else?
Thanks,
Rueben