Which two types of identity stores can be configured for a tenant?

Which two types of identity stores can be configured for a tenant? (Choose two.)
A. Active Directory
B. OpenLDAP
C. vSphere Single Sign-On (SSO)
D. Active Directory Lightweight Directory Services