A company has a branded marketing website and wants users to authenticate with their Experience Cloud identity without leaving the marketing site. What Salesforce feature enables this, and what are the configuration requirements?