Logs must be forwarded to a destination either within the Shield Private Space or within a VPN that includes the Shield Private Space.

Applications in the shield Private Space do not forward logs to Heroku's Logplex router.

Applications in the Shield Private Space forward logs to a separate, high-compliance instance of Heroku's Logplex router

All applications in the Shield Private Space forward their logs to the same destination.

A Heroku account is created for the employee automatically the first time they log in to Heroku via SSO.

The employee should create a new Heroku account with the exact email addresslisted in their IdP record.

No account creation is required, because all SSO users in a particular Enterprise Team are associated with a single Heroku account.

An administrator of the Enterprise Team creates the Heroku account with the exact email address listed in the employee's IdP record.

Using the same backing services in all of an application's environments.

Configuring application logging to write stdout.

Executing long-running tasks as background processes.

Writing processes that are fast to start up and gracefully shut down