Empty contacts being created with audit log showing "From Create Login"

Content

Hi,

I was wondering why there were empty contacts being created in my site. The audit log only shows one line with a description of "From Create Login"

Our instance is internal facing only and contacts use SSO to sign-in based off their ADFS authentication i.e. no one will be creating their own accounts.

How is this happening?