An organization needs to integrate with a third-party cloud application. The organization has 15,000 users and does not want to allow the cloud provider to query it's LDAP authentication server directly. Which of the following is the BEST way for the organization to integrate with the cloud application?

A.Upload a separate list of users and passwords with a batch import.

B.Distribute hardware tokens to the users for authentication to the cloud

C.Implement SAML with the organization's server acting as the identity provider.

D.Configure a RADIUS federation between the organization and the cloud provider