Universal Containers (UC) has configured SSO for their Heroku Enterprise Team using an identity provider (IdP). When a new employee joins the company, how should their Heroku account be created?

A. A Heroku account is created for the employee automatically the first time they log in to Heroku via SSO.
B. The employee should create a new Heroku account with the exact email address listed in their IdP record.
C. No account creation is required, because all SSO users in a particular Enterprise Team are associated with a single Heroku account.
D. An administrator of the Enterprise Team creates the Heroku account with the exact email address listed in the employee's IdP record.

Suggest answer: A

Reference: