How to skip password updating when using SAML?

Hi,

I use Keycloak (A) as a SAML IdP for a service, AD for User Federation and another external service - via SAML - as my IdP (B). This automatically creates a user when redirected from the SAML IdP.

However, the user is always asked to update his password. How can I avoid this? I use “Identity Provider Redirector” so that the users can authenticate on the external IdP, but how can I simply skip password updating for new users?

Best,
Francis