A central identity provider is used for workforce access. Which design remains necessary in OCI?

1. A shared local password used by all employees.
2. Disabling audit because the identity provider logs sign-ins.
3. Appropriate identity mapping, group membership, and policies granting intended resource access.
4. Automatic tenancy administration for every federated identity.