A company is migrating their on-premises applications to Azure. They need to ensure that users can authenticate using their existing Active Directory credentials without requiring password synchronization to the cloud. The solution must minimize infrastructure management overhead. What should you recommend?