Checks if the current requires password to authenticate operations. In case the user doesn't have a password, means is an SSO user.