Which two identity store options allow you to authorize based on group membership?

Which two identity store options allow you to authorize based on group membership? (Choose two).

A.
Lightweight Directory Access Protocol

B.
RSA SecurID server

C.
RADIUS

D.
Active Directory