At the moment, SSO authentication requires a user account to exist in the system. With this change, user accounts are automatically provisioned if they don't exist but were authenticated successfully.
We will also include the option to add those provisioned users to teams at the same time.