I see the changelog mentions setting unusable password on the user object, but I can't find it in the code.
https://github.com/IdentityPython/djangosaml2/blob/169fc486fc387a0ed57ae01ee67140a424a83a46/CHANGES#L386C1-L388C70
Perhaps, this change was lost while deprecating configure_user method?