You need to use the gcloud command-line tool to authenticate via a third-party SAML single sign-on (SSO) identity provider. Which two options are required to ensure compatibility with the third-party identity provider (IdP)?