A company wants to set up single sign$-$on $($SSO$)$ without passing credentials through to each piece of software and cloud service. Which protocol would meet this requirement