The first step in reducing the number of credentials each employee must maintain when using multiple SaaS applications is to select an Identity Provider (IdP). An IdP provides a centralized authentication service that supports Single Sign-On (SSO), enabling users to access multiple applications with a single set of credentials. * Enabling SAML would be part of the technical implementation but comes after selecting an IdP. * OAuth tokens are used for authorization, but selecting an IdP is the first step in managing authentication. * Password vaulting stores multiple passwords securely but doesn't reduce the need for separate logins.