Your company is migrating to Google Cloud and wants to manage user identities centrally. They currently use an on-premises Active Directory (AD). You need to ensure that users can authenticate to Google Cloud using their existing AD credentials and that user lifecycle management is automated.

Which TWO actions should you take? (Select TWO)

Export users from AD to a CSV file and manually import them into Cloud Identity weekly.

Use Google Cloud Directory Sync (GCDS) to synchronize users from AD to Cloud Identity.

Configure Single Sign-On (SSO) using SAML with your on-premises AD as the Identity Provider (IdP).

Create a script using the gcloud iam service-accounts create command for each user.

Set up a Cloud VPN to allow Google Cloud to directly query your on-premises AD for every login request.