solutions architect is consulting for a company. when users in the company authenticate to a corporate network, they want to be able to use aws without needing to sign in again. which aws identity should the solutions architect recommend for this use case?