Network access SSO to HTTPS web server and ACL

I want to implement SSO to HTTPS web server after network access VPN connection is established. In addition, I want to implement ACL to restrict specific URL access. Do I need web server SSL cert to intercept traffic? Any KB reference?

 

Thx.