In order to disable the registration form and allow registration by SSO only:
- Set "Registration Type" to "No registration" in ACP -> Settings -> User.
- Click Save
On the login page, when a user tries to login with SSO, user account will be automatically created if the user account doesn't exist already.