Microsoft Sign-In

A Microsoft button on the sign-in page, tied to your own directory. People use the work account they already have, you stop managing passwords, and access ends when their directory account is disabled rather than when somebody remembers to lock them here. Only accounts in the directory you name can sign in.

Registering the application on Microsoft's side is covered in the Microsoft Entra integration guide.