Which feature must be enabled for MDM to manage user authentication effectively?

For Mobile Device Management (MDM) to manage user authentication effectively, enabling Single Sign-On (SSO) is essential. SSO allows users to authenticate once and gain access to multiple applications and services without the need to log in repeatedly. This not only streamlines the user experience but also enhances security by reducing the number of times a user must enter their credentials.

With SSO, MDM can integrate with identity providers to ensure that users are accessing corporate resources securely and conveniently. It simplifies the management of user credentials, enabling administrators to enforce strong authentication methods and policies from a central point.

In the context of the other options, while password recovery options, device locking mechanisms, and remote wipe capabilities contribute to overall device security, they do not directly enhance the management of user authentication like SSO does. These features focus more on securing the devices and data rather than streamlining the way users access various applications and services securely.