Your organization is currently updating an existing corporate application that is running in another public cloud to access managed database services in Google Cloud. The application will remain in the other public cloud while the database is migrated to Google Cloud. You want to follow Google-recommended practices for authentication. You need to minimize user disruption during the migration. What should you do?

A. Use workload identity federation to impersonate a service account. B. Ask existing users to set their Google password to match their corporate password. C. Migrate the application to Google Cloud, and use Identity and Access Management (IAM). D. Use Google Workspace Password Sync to replicate passwords into Google Cloud.