A retailer uses B2C Commerce for the storefront and Service Cloud for customer service. How should authentication and authorization be designed so that a logged-in customer can seamlessly access their Service Cloud self-service portal without re-authenticating?