A company uses a cloud-based CRM SaaS application accessed by 400 employees. Currently, each employee maintains a separate username and password for the CRM, and the security team struggles to enforce password policies and disable access when employees leave. The company already operates a corporate identity provider (IdP) that manages employee accounts. Which approach best addresses these problems while improving the user experience?