If you're integrating with AzureAD you want to look at the CREATE LOGIN FROM EXTERNAL PROVIDER syntax.