A company wants enterprise employees to access Google Cloud using its external identity provider without creating an independent password for every cloud identity. Which approach best fits?

1. Use Workforce Identity Federation.
2. Manage infrastructure with version-controlled Terraform.
3. Use a Shared VPC host project with attached service projects.
4. Use Cloud Asset Inventory.