Your network contains an on-premises Active Directory forest.
You are evaluating the implementation of Microsoft 365 and the deployment of an authentication strategy.
You need to recommend an authentication strategy that meets the following requirements:
Allows users to sign in by using smart card-based certificates

Allows users to connect to on-premises and Microsoft 365 services by using SSO

Which authentication strategy should you recommend?