What should the architect recommend to allow salesforce profiles to be managed from a central system of record?

Universal containers (UC) has implemented a multi-org strategy and would like to centralize the management of their salesforce user profiles .

What should the architect recommend to allow salesforce profiles to be managed from a central system of record?
A . Implement jit provisioning on the SAML IDP that will pass the profile id in each assertion.
B. Create an apex scheduled job in one org that will synchronize the other orgs profile.
C. Implement Delegated Authentication that will update the user profiles as necessary.
D. Implement an Oauthjwt flow to pass the profile credentials between systems.

Answer: A