3826202 - What do I update as Password in 100 record if we use SSO?

We currently have SSO set up, but on our Employee Import we have the 100 record set to "welcome" for the password reset, but IT Security group informed that this is a security risk that anyone who knows an employee login could potentially log into another employees account using "welcome" as the password.
How do we need to update the 100 record of the HR file to not use "welcome" as an employee's initial password ($BLANK$), but instead when the employee is using the SSO network it will automatically recognize their system password via SSO even for new employees. 

The System Admins would still need to be able to create a password for individuals that may need to access SAP Concur outside of the SSO network.

Employee Import 100 Record for Single Sign On , KBA , CON-CA , Cross Applications , CON-CA-ADM , Administration , Problem