Custom UI after SSO login without access

What product/components do you use and which version/fix level are you on?

Cumulocity IoT 1011.0.25

Is your question related to the free trial, or to a production (customer) instance?

Customer

What are you trying to achieve? Please describe it in detail.

Is there a way to add a custom screen between SSO login and Cumulocity?
Use case: customer has multiple custom applications deployed to c8y with SSO enabled. Access to the applications is managed by AD groups outside of Cumulocity. Sometimes someone is trying to login with SSO, but was not added to the group, would it be possible to intercept this and show some custom page with explanations on what to do next?