A multinational corporation seeks to streamline its employees' access to a suite of internal and external cloud-based tools. They want a system where employees can log in once and have access to all necessary applications without needing to re-authenticate for each one. Which protocol is best suited for this type of enterprise-wide single sign-on (SSO) functionality?