Allow user to "receive forget password email"/"reset their own password" when SSO is enabled

We have the same use case.  Client users are SSO and internal users have login, but cannot reset their passwords.  Being able to flag users as SSO or NOT_SSO and allowing the reset password to work if they are NOT_SSO would be helpful.