Contoso runs an on-premises Active Directory Domain Services environment and has just adopted Microsoft 365. The IT team wants employees to use the same username and password for both on-premises resources and cloud apps, and they want on-premises identities automatically synchronized to Microsoft Entra ID. Which solution should they deploy to achieve this hybrid identity synchronization?