SSO Between Portals Based On User Roles

Hi Experts,

Is it possible to create a configuration where SSO between two SAP Portals in such a ways that it will work for certain employees only as per roles or rather not work for employees who do not have certain role?? If Yes, How??

Thanks