Which two actions should you perform?

You administer an Active Directory Domain Services forest that includes an Active Directory Federation
Services (AD FS) server and Azure Active Directory. The fully qualified domain name of the AD FS server
is adfs.contoso.com.
You must implement single sign-on (SSO) for a cloud application that is hosted in Azure. All domain users
must be able to use SSO to access the application.
You need to configure SSO for the application.
Which two actions should you perform? Each correct answer presents part of the solution.

A.
Use the Azure Active Directory Synchronization tool to configure user synchronization.

B.
Use the AD FS Configuration wizard to specify the domain and administrator for the Azure Active
Directory service.

C.
Create a trust between AD FS and Azure Active Directory.

D.
In the Azure management portal, activate directory synchronization.