MS SQL connector authentication?

Hello, sorry if this is not the right section. We are working to build our Confluent architecture out. One of our first use cases is a on premises MS SQL sink with CDC

Microsoft SQL Server Change Data Capture (CDC) Source (Debezium) Connector for Confluent Cloud Quick Start | Confluent Documentation

We are researching what the authentication options are for the connector? The documentation just says username and password so we assume sql login only vs an active directory credential? Anyone have a clear answer if an AD service account could be utilized? The sink connector will run in AKS.