No account and therefore no direct password is required. Synchronisation takes place with modern Azure apps that work with keys (tokens). The authorisation is minimised to the corresponding needs (read rights to the minimum user attributes with group query, write rights to the contact objects of all users).