Before configuring SAML authentication to work with True Single Sign-On, which two prerequisites must be met? (Choose two.)

Before configuring SAML authentication to work with True Single Sign-On, which two prerequisites must be met? (Choose two.)
A . Configure SAML authenticator to use self-signed certificates.
B . The root certificate for the SAML server is installed.
C . Install and configure VMware Identity Manager.
D . Single sign-on is disabled as a global setting.

Answer: B,C