All users have Windows 10 devices that are hybrid Azure AD joined. An Azure SQL database supports Azure AD authentication. Developers will connect from SQL Server Management Studio using their on-premises Active Directory accounts and you must minimize authentication prompts. Which authentication method should they use?

Active Directory - Integrated is the correct choice because it leverages Windows Integrated Authentication. Since the Windows 10 devices are hybrid Azure AD joined, users are already authenticated to their on-premises Active Directory. This method allows SQL Server Management Studio (SSMS) to use the existing Windows credentials (Kerberos or NTLM) to authenticate to Azure SQL Database without requiring users to re-enter their credentials, thus minimizing prompts. SQL Login is incorrect as it uses SQL-specific usernames and passwords, not Azure AD accounts. Active Directory - Universal with MFA support would prompt users for their Azure AD credentials and potentially for MFA, which doesn't minimize prompts. Active Directory - Password would also require users to enter their Azure AD password, which is not the most seamless experience for hybrid-joined devices.