This can somewhat be automated using SQLCMD or Powershell. If you can setup contained databases it is much easier to just create the user in the database and let that transfer across - then the users can connect to that database directly without a login.

You should also consider disabling or dropping the login on the primary after the new user and login have been created on the secondary. You really don't want users to accidentally access the primary system and run reports.