Add group settings for Azure integration

Add a new section to Group settings -> SAML SSO for Azure Integration. Then add two new settings:

• Enable
• API Token

This will be used by #414873 (closed) to communicate with the Microsoft API and will be behind a FF

Documentation

Document permissions needed:

GroupMember.Read.All User.Read.All