A company has been migrating a significant number of its on-premises applications to various SaaS providers. The IT department has noticed the following: 1. User account management has become…

Single sign-on is a narrower capability typically scoped within one organization's boundary, whereas federation is the more comprehensive cross-domain solution appropriate for external SaaS providers.

MFA directly addresses increased account compromises by requiring additional verification factors beyond passwords, significantly reducing the risk of credential-based attacks across dispersed SaaS platforms.

A network intrusion prevention system operates at the network layer to detect threats and does not address identity management, account compromise, or SaaS access challenges.

Password synchronization reduces the administrative burden of managing separate credentials per SaaS provider by keeping user passwords consistent across services, directly addressing the account management challenge.

Federation establishes trust relationships between the organization's identity provider and multiple SaaS providers, allowing users to authenticate via a single federated identity and access various SaaS applications - resolving both account management complexity and access difficulty.

IPSec tunnels to SaaS providers are architecturally impractical for public cloud SaaS services and do not address user account management or compromise issues.

VPN connections to SaaS providers add unnecessary complexity and do not solve user identity management or account security across multiple SaaS platforms.