I have this same issue, i find the documentation bewildering and can find now reference to how the SSO source is populated. I had hoped that there would be something to tell me for existing contacts/users follow route A and when creating new users either through auto provisioning or not follow Routes B or C.
I can't be the only person to ever need so i'm not sure why its so difficult to find good (read useable) information.