Disable Login Screen or Prevent non-sso Login attempts

[gohabsgo]

Hey Folks,
We have an internal application that we have users sso into Cognos from to run some reports and would like to prevent the ability for any of our users to access Cognos in any way other then through this application.

So for example, if they were to login as normal , crop the URL, close their browsers and then later on try to access the URL directly for cognos, it would not let them in.

Any advice or insight would be most appreciated!