You have a hybrid Azure AD environment with SSO enabled and an Azure SQL Database configured for Azure AD authentication. Developers on domain-joined devices must connect using their on-premises AD accounts with minimal authentication prompts. Which authentication method should they use in SQL Server Management Studio?

Active Directory - Integrated is the correct choice because it leverages the user's existing Windows credentials from their domain-joined device, providing a seamless single sign-on experience without requiring them to re-enter their password. This fulfills the requirement for minimal authentication prompts. Active Directory - Password would require users to manually enter their password, defeating the purpose of minimal prompts and SSO. Active Directory - Universal with MFA support is suitable for scenarios where MFA is enforced or when connecting from non-domain-joined devices, but it would still introduce an additional prompt (for the password or MFA challenge) compared to Integrated authentication on a domain-joined device. SQL Server Authentication uses SQL-specific logins, not Azure AD identities, and thus wouldn't allow connection with on-premises AD accounts.