When a new user attempts to login through Single Sign On I want Workfront to setup a general account based off a template (eg with a company, home group, layout template, access level etc). We should be able to change these for the specific user without them being overwritten when the user next logs in. I would like to source the SSO information for name, surname and email initially but then leave it to the user to identify if they wish to change this (eg preferred first name etc). Ie we use the mapped data to set up the account but not to continually update it.