Also clear out the "password_crypt" field when clearing out "password"

model/res_users.py

@@ -264,7 +264,10 @@
 
         if vals and vals.get('saml_uid'):
             if not self._allow_saml_and_password():
-                vals['password'] = False
+                vals.update({
+                    'password': False,
+                    'password_crypt': False,
+                })
 
         return super(res_users, self).write(vals)