Which two are valid Identity Sources when configuring vCenter Single Sign-On? (Choose two.)