Contoso has acquired two other companies, resulting in three separate on-premises Active Directory forests that have no trust relationships between them. Contoso wants to synchronize users from all three forests to a single Microsoft Entra tenant. The IT team requires a lightweight solution that supports high availability without deploying additional heavyweight servers, and they do not require advanced features such as device synchronization or pass-through authentication with complex filtering. Which hybrid identity solution should you recommend?