A company wants to implement a federated identity solution for its employees to access the AWS Management Console. The company already uses an on-premises Microsoft Active Directory. Which TWO solutions will meet this requirement? (Select TWO.)

Use AWS IAM Identity Center (AWS Single Sign-On) and configure it to connect to the on-premises Active Directory using AWS Directory Service.

Create IAM users for each employee and sync their passwords using a custom script.

Configure a SAML 2.0 identity provider (IdP) in IAM and set up trust between the on-premises AD FS and AWS.

Use Amazon Cognito User Pools to sync users from the on-premises Active Directory.

Use AWS Directory Service for Microsoft Active Directory (AWS Managed Microsoft AD) to replace the on-premises directory.