This article outlines the functionality related to managing SSO Users.
Disabling a SSO User's K3 Password
It is recommended that all SSO users have their K3 password disabled, except for specific exceptions. Disabling a user's password prevents that user from logging in with their K3 username and password (native credentials).
Determining if a SSO User has a password setup
Users that have passwords setup have the password icon highlighted in green.

