You are designing a Windows Azure web application.  All users authenticate by using their Active Directory Domain Services （AD DS） credentials.  You need to recommend an approach for enabling single sign-on for domain-authenticated users.   Which two actions should you recommend？（）

• A、 Use Forms authenticationto generate claims.
• B、 Use Active Directory Federation Services （AD FS） to generate claims.
• C、 Use SqlMembershipProvider in the web application.
• D、 Use Windows Identity Foundation in the web application.