Scented Candle Company currently uses PingFederate for applications to authenticate to Active Directory using SAML2.0. The organization wants to reduce the number of direct connectivity to its AD servers and force everything through PingFederate.
What auth method should Scented Candle Company enable and configure for Vault?