I have done this before with a combination of nFactor and EPA. You will have to do the domain check using epa then assign a pass or fail group based on the outcome of that. Then apply the session policy to the group (epa pass - ses_pol_epa_passed) etc then you can use smart access filters in Citrix policy to either enable or disable clipboard redirection based off that.