In user settings should change password be removed since we use SSO?
That would seem to make sense to me.
