A network administrator needs to configure Active Directory authentication for VPN access to a Cisco Secure Firewall Threat Defense instance registered with Cisco Secure Firewall Management Center. Which Secure Firewall Management Center system settings must be configured first to achieve this goal?