Which component is mandatory for Cloud Pak for Automation installation if single sign-on needs to be enabled?