Password field is like schrodigers cat, can be emtpy and not at the same time

The picture says it all.But in text:

When configuring SAML the page says "Password is not mandatory for non internal authentication type.". But when adding a user without password the error says "Incorrect value for field "Password": cannot be empty."