Restrict site access after gaining access through LTI?

Hi All,

I've published an LTI test.
With it the name and mailadres of the new LTI user becomes available in the LTI-publishing site.
But. With it this user can also login to the LTI site and gains full user access?
What strategy to use to limit access.

Thanks,

Hans