Do not force SSO based user to change password

Thanks for the feature request and patch! Password Policy 7.x-1.x and 7.x-2.x have a feature that allows excluding selected authentication modules from password policies. Here is some of the code from 7.x-1.x:
https://git.drupalcode.org/project/password_policy/blob/7.x-1.x/password...

I think we should probably implement this in 8.x-3.x.

So I think your patch is the right idea, but that we shouldn't have any code specific to "simpleSAMLphp Authentication" in Password Policy, so we can accommodate all the many other authentication modules like "simpleSAMLphp Authentication".

It might be reasonable to commit code specific to that module (simpleSAMLphp Authentication) until we can implement the more general solution. Later we would just drop the module-specific code.

Patch for https://www.drupal.org/project/password_policy/releases/8.x-3.0-beta1 release.

Make all SSO users skip password policy.

Thanks for the idea @simbaw. I've used your approach, but improved implementation a bit.

Changes are :

• Comments changed to reflect the actual checks - external authentication in general, rather then specific implementation (SAML )
• FAPI validate callback lost return value
• Added entry to the README about externally authenticated users

Correct interdiff for the previous comment.

Battle tested the patch from #12 - works like a charm! Thanks @simbaw - all credits should go there.

Thanks!