Does each user in an organization have their own credentials to sign in?

Yes. Each user is required to create their own credentials that include Password, Anti-phishing set up and Security questions.