Map SSO IdP group to balena team

It would be useful to set up an automatic mapping from a specific SSO identity provider group to a balena team. Then when a new enterprise SSO user authenticates to balena, they automatically become a member of that team.

We already have the ability to assign a per-organization default balena team to a new user (docs). This feature provides the ability to assign a balena team in the organization based on one or more SSO IdP groups the user belongs to.