Hosted Signin page auto signs in people without an account if selected gmail option

I have a hosted signup page and users can’t sign up them selves we have to create their accounts for them.

Email and password

When anyone selects the login with gmail option it automatically signs them in and they can access the logged in user area.

Any ideas?

If you want to have users using an email and password specific to your application as the only means for authentication then you should only have enabled a database connection for the relevant client application. In addition, if you want to disable signups for the database connection then you can toggle this at the connection settings.

Enabling Google social authentication means that any user with a Google identity can authenticate into your application by default.