A company wants employees to sign in once and then access dozens of cloud applications without re-entering credentials for each one. The IT team needs a central service that authenticates users and issues tokens that the applications trust. Which component provides this capability?