As we are looking to enable SSO, we don't want the ability to people to self register as we want them to be a customer of our product first.
You can achieve this by specifying the email domains for your employees and partners. (which can be found on Settings -> Account -> Configure idea portals settings. By applying this setting, users who do not have email addresses matching your set domains will not be able to access the portal.