Skip lockouts for SAML/SCIM provisioned accounts with password automatically set

In !132758 (merged) we updated the logic to check for 2FA status before incrementing the fail counter or attempting for password OAuth. We should make a similar change for SAML/SCIM provisioned accounts that have a password automatically set.

See https://gitlab.slack.com/archives/C05UGU9073J/p1695928735272419 (internal) for additional context