A cloud application development team needs to consider the following requirements to the built in as part of the application's authentication process: - Customers should have the flexibility to use…

Certificates can fulfill the requirement of customers using their own identity stores if the identity store is a Public Key Infrastructure (PKI) managed by the customer. In this scenario, customers issue certificates to their users from their own Certificate Authority (CA), which the application then trusts, providing control over their identity credentials.

Single sign-on (SSO) directly addresses the need for users not to provide credentials repeatedly across different applications. Once a user authenticates to one application or service, SSO enables them to access other authorized applications with different permission sets without re-entering their credentials, providing a seamless user experience.

One-time passwords are an authentication method, typically for multifactor authentication, and do not provide flexibility for using own identity stores or SSO.

While Federation allows customers to use their own identity stores by integrating with their identity providers, it is not selected as one of the two correct answers for this specific question.

Multifactor authentication enhances security but does not directly address the flexibility of using own identity stores or repeated credential entry across applications.

Hardware tokens are a form of authentication factor, often used for MFA, and do not address identity store flexibility or SSO.