Build the document for the Client Login Policy step, then paste it into the step's Policy field in Keycloak. The readme explains the format and how to install the step.
Client Login Policy
What every client that is not named below is held to. Leave it empty and those clients admit everyone.
Clients the policy skips completely, even when they are named above with rules of their own.