A large enterprise wants its Snowflake users to log in using the company's existing identity provider (IdP), such as Okta or Microsoft Entra ID (formerly Azure AD), so that employees use their corporate credentials and single sign-on across all internal applications. Which Snowflake authentication mechanism should the account administrator configure to meet this requirement?