You are designing a Windows Azure web application.
All users authenticate by using their Active Directory Domain Services (AD DS) credentials.
You need to recommend an approach for enabling single sign-on for domain-authenticated users.
Which two actions should you recommend?
(Each correct answer presents part of the solution. Choose two.)

A.
Use Forms authentication to generate claims.

B.
Use Active Directory Federation Services (AD FS) to generate claims.

C.
Use SqlMembershipProvider in the web application.

D.
Use Windows Identity Foundation in the web application.