An organization runs several internal apps, each currently maintaining its own username and password store, which is costly to manage as staff join and leave. Management wants users to sign in once and be automatically signed in to all apps that share the same directory. Which capability, enabled by delegating to a centralized identity provider, achieves this?