A cloud-based identity and access management service for securing user authentication and resource access
Hi OwenAir.
Read this article which describes your scenario as far as I understand it https://learn.microsoft.com/en-us/azure/active-directory/devices/azuread-join-sso