Salesforce Certified Heroku Architecture Designer — Question 25

Universal Containers (UC) has configured SSO for their Heroku Enterprise Team using an identity provider (IdP).
When a new employee joins the company, how should their Heroku account be created?

Answer options

• A. A Heroku account is created for the employee automatically the first time they log in to Heroku via SSO.
• B. The employee should create a new Heroku account with the exact email address listed in their IdP record.
• C. No account creation is required, because all SSO users in a particular Enterprise Team are associated with a single Heroku account.
• D. An administrator of the Enterprise Team creates the Heroku account with the exact email address listed in the employee's IdP record.

Correct answer: A

Explanation

The correct answer is A because with SSO configured, a Heroku account is automatically provisioned for employees upon their first login through the IdP. Option B is incorrect as the employee does not need to manually create an account, C is wrong since each SSO user has a unique Heroku account, and D is inaccurate because account creation does not require admin intervention in this scenario.