Introduce allow_single_sign_on_email_regexp to limit automatic account creation.