A company has 200 employees who each need access to multiple AWS accounts under a single AWS Organization. The security team wants to centrally manage user access and allow employees to sign in once using the company's existing corporate directory credentials, without creating separate IAM users in each account. Which AWS service best meets this requirement?