Which endpoint should you use?

You have an on-premises Windows Identity Foundation (WIF) application. A section of the application uses
resources that are hosted in Azure. The application uses Azure Active Directory (Azure AD) to control access to
the section of the application that accesses Azure resources. You synchronize all user principals to Azure
Active Directory.
The application has the following requirements:
Use Windows integrated credentials for single sign-on (SSO).
Use Azure Active Directory as an identity provider.
You need to create an endpoint to use for web sign-in to the secured section of the application.
Which endpoint should you use?

A.
SAML-P

B.
OAuth

C.
Azure AD Graph API

D.
WS-Federation