An administrator is tasked with configuring an appropriate Single Sign-On (SSO) solution for VMware vCenter based on the following criteria:

• The solution should support the creation of Enhanced Link Mode groups.

• All user accounts are stored within a single Active Directory domain and the solution must support only this Active Directory domain as the identity source.

• All user account password and account lockout policies must be managed within the Active Directory domain.

• The solution should support token-based authentication.

Which SSO solution should the administrator choose based on the criteria?