Employees should be created and removed in a supported SaaS application according to their assigned access. Which capability should be configured?

1. Automated application provisioning using the supported integration
2. A VM backup policy
3. A DNS alias
4. Single sign-on alone as a guarantee of account lifecycle synchronization