If their account is managed externally, give them an error if they try to reset their password.