Develop a new application client within the directory. Establish a listener rule for the ALB, utilizing the authenticate-oidc action. Set up the rule with the necessary issuer, client ID, secret, and endpoint details for the Active Directory service. Ensure the new application client is configured with the ALB's provided callback URL.

Set up an Amazon Cognito user pool, integrating it with a federated identity provider (IdP) that contains metadata from the directory. Generate an application client, linking it to the user pool. Create a listener rule for the ALB, specifying the authenticate-cognito action. Configure the rule to utilize the user pool and application client.

Integrate the directory as a new IAM identity provider (IdP). Establish a new IAM role with a SAML 2.0 federation entity type. Define a role policy granting access to the ALB. Set this role as the default for authenticated users associated with the IdP. Create a listener rule for the ALB, employing the authenticate-oidc action.

Activate AWS IAM Identity Center (AWS Single Sign-On), configuring the directory as an external SAML-using identity provider (IdP). Implement automatic provisioning. Develop a new IAM role with a SAML 2.0 federation entity type. Craft a role policy allowing ALB access. Attach this role to all relevant groups. Establish a listener rule for the ALB, using the authenticate-cognito action.