Your company subscribes to a legacy SaaS web application that only supports authentication via its own username and password form. It does not support SAML, OIDC, or SCIM. The finance team of 12 users currently shares one set of credentials that they type manually, and management wants to stop distributing the password to users while still allowing single sign-on from the My Apps portal. Which enterprise application single sign-on option should you configure in Microsoft Entra ID?