We are a large facility with multiple labs. Would implementing SSO mean that all our users now have access to every lab within the facility?

No! Users will only have access to the labs they have been given permission to access previously. Lab access on Clustermarket is still managed by invitations as before.