I think you take the wrong approach here. Logging in through SSO, deeplinks and anonymous users are three requirements that all result in different things. Anonymous users always start at your standard homepage. SSO users can be redirected to other pages so they could sidestep the anonymous home page. Deeplinks could be used by anonymous users or regular users. If a deeplink is available to that category depends on your security.
So there is no one magic microflow to do all this for you. You should split up those requirements and define what should be done.