IOMG Technical Standards: User Authentication
User authentication must be performed by AD (Active Directory) or AAD (Azure Active Directory) a set of services that identifies and authorises users and computers.
Single Sign-On must be facilitated through either ADFS (Active Directory Federation Services) or AAD (Azure Active Directory)
Multi-factor Authentication is provided through AAD (Azure Active Directory) for cloud-based services and offers a framework for on-prem services such as Remote Access through Azure Application Proxy.