A company has an enterprise SSO platform (e.g., Okta, Azure AD, Ping) that manages all employee identity. How should Salesforce be configured in relation to this platform?