Contoso runs a manufacturing plant and wants floor workers who have no email address and no company credentials to sign in to a shift-scheduling app using their existing Google or Facebook accounts. The company does not want to create traditional employee accounts or invite them as business guests. Which Microsoft Entra identity capability should Contoso use?