An organization is extending its infrastructure by using a public cloud provider. Which identity management mechanism would allow employees to use their existing credentials to access resources in both environments?