A cloud administrator implemented SSO and received a business requirement to increase security when users access the cloud environment. Which of the following should be implemented NEXT to improve the

SSH is a protocol for encrypted remote shell access to servers and does not directly enhance security for users accessing a cloud environment through SSO.

MFA requires users to present two or more verification factors - such as something they know (password) combined with something they have (authenticator app or hardware token) - significantly reducing the risk of unauthorized access even if credentials are compromised. Layering MFA on top of an existing SSO solution is a well-established security posture improvement because it addresses the primary weakness of single-factor authentication without replacing the convenience SSO provides.

Certificates can provide strong authentication but implementing a full PKI or certificate-based auth system is a larger architectural change and not the most direct next step compared to enabling MFA on the existing SSO platform.

Federation is a mechanism that allows identity trust between separate identity providers and is often already part of the SSO implementation; adding it again does not meaningfully increase the security posture.