Configure SAML Single Sign-On with Salesforce as the Identity Provider

Configure single sign-on with a Salesforce org as the identity provider for an external Heroku app acting as the service provider, using SAML.