Users might not have a password set when logging in using a different method than a password login, like OTP.
When impersonating, the current flow always expects a password. This would make impersonating this set of users impossible.
By making the password optional, all users could be impersonated.
Users might not have a password set when logging in using a different method than a password login, like OTP. When impersonating, the current flow always expects a password. This would make impersonating this set of users impossible. By making the password optional, all users could be impersonated.