Can user logins be excluded using single sign on?

SugarCRM v10.0.0 Pro - on demand.

We have a 200 user system. Most users are named individual regular users but some are occasional users who use a shared log in to the crm. 

We have recently upgraded our outlook to outlook 365 cloud, using Azure AD.

So, can the crm be set up to use SSO for individual users by manual login for group users, or is it a case of all users have to log in one way only?

regards john