You are designing a plan for migrating an application to the Windows Azure platform. All users authenticate by using their Active Directory Domain Services （AD DS） credentials. The Windows Azure application must provide single sign-on （SSO） for domain-authenticated users. You need to recommend an authentication type for the service endpoint behavior. What should you recommend？（）
- A SAML credential
- B Windows authentication
- C Shared secret credential
- D Microsoft Challenge Handshake Authentication Protocol （MSCHAP）