This is ridiculous. On no other platform would the user need a separate password from their SSO password.