Your company publishes an on-premises legacy web application through Microsoft Entra Application Proxy. The application does not support SAML, OpenID Connect, or Integrated Windows Authentication. Instead, it authenticates users by reading HTTP request headers that contain the user's identity and attributes. You must configure single sign-on so that authenticated Entra users are seamlessly signed in to this application. Which single sign-on method should you configure on the enterprise application?