You are an IT administrator at a company that has an on-premises Active Directory and is planning to implement Microsoft 365. You want to avoid creating new user accounts in Azure AD and instead use existing on-premises accounts. Which tool should you use for user account synchronization between on-premises AD and Azure AD?