Activate sso with keyclock

hello,
in kibana i have many spaces with custom rule for eatch user. each user can acced only on his space throw his rule. the problem after activate sso with rule mapping ,the user connecte to all space throw the rule mapping. but i need the user connect only to his space with sso throw the custom rule.
have you an idee