A deployment wants supported single sign-on to session hosts. Which implementation principle is correct?

1. Share one local administrator account with every user
2. Assume signing into any website automatically configures session-host SSO
3. Disable all authentication as a substitute for SSO
4. Configure the documented identity and host-pool prerequisites for the intended SSO flow