Users allowed to see only some categories

Yes, you’ll include the user’s group(s) in the SSO load. It’s documented in Setup DiscourseConnect - Official Single-Sign-On for Discourse (sso)