Welcome to the Community!
When an authorization error is thrown, the application must handle the error by using the error description in the URL. Unfortunately, you can’t display the error on the Universal Login page that is thrown in a rule since the rule runs after the user logs in.
Here is a detailed FAQ that explains more: Can I show errors raised in rules in the login page?