Restricting Access to categories

That would have to be done on the SSO provider. If a user tries to SSO and shouldn’t have access to the forum, the system you run which provides SSO should halt the auth chain and present an error message “You can’t access the forum because X”