A company is embarking on a cloud migration journey to leverage the scalability and cost-efficiency of Microsoft Azure. However, it faces significant challenges in ensuring secure and seamless access to its hybrid environment, which includes both legacy on-premises applications and new cloud-based applications. The company's primary objectives are to minimize user disruption during the transition and to maintain stringent security standards. Given these requirements, which of the following features of Microsoft Entra ID would BEST support the company's transition by enabling seamless single sign-on (SSO) and providing secure remote access to legacy applications? (Choose two options)