An administrator is implementing a new SaaS application. The administrator has been directed to enhance the user authentication experience. Which of the following technologies BEST meets this requirem

Federation services enable identity sharing and SSO across organizations or domains but do not inherently strengthen the security of the authentication step itself.

Multifactor authentication (MFA) enhances the authentication experience by layering a second or third verification factor - such as a push notification, OTP, or hardware token - on top of a password. This directly strengthens identity assurance for SaaS application access without restructuring the underlying identity infrastructure. MFA is the most direct and widely adopted method to improve authentication security for cloud-based SaaS applications.

Biometric authentication is one specific factor type and may not be universally available or practical across all devices and users accessing a SaaS application.

Directory services manage user accounts and group policies and serve as an identity store, but are not a mechanism for enhancing the authentication experience.