I agree. It might be preferable to add a notice on the external accounts page with advises users without a password to create one before associating new accounts.
Sorry to revive this really old thread, but my client just came across this edge case and would like a more elegant solution.
Is there a way to disable the password requirement if the user doesn't have one?
Or to force a new user to create a password?