SSO can actually provide values for “custom fields”, but I don’t remember the syntax right now.
However, the privileges setting is not implemented - it should be possible with API calls, though. (Basically, your main site issues commands as an admin.)