Which of the following would a company implement to provide authentication to multiple websites that are delivered through PaaS?

Federation services enable SSO by establishing trust relationships between separate identity providers and service providers across different organizations or domains, rather than managing unified access within a single company's PaaS platform.

MAC (Mandatory Access Control) enforces access based on fixed security labels set by a central authority and is not a standard mechanism for web application authentication in PaaS environments.

Multi-factor authentication adds additional verification factors to a login process but does not itself provide a framework for managing or delegating authentication across multiple websites or applications.

RBAC lets a company define roles - such as admin, editor, or viewer - and assign them to users once, with those roles granting appropriate access across all websites hosted on the PaaS platform. This centralizes access decisions so users authenticate through a single role-based policy engine rather than managing credentials separately for each website.