When full-stack is set up with social login/registration and a user is created through social registration the managed user does not have a password. The idm profile page does not allow the user to create a password without passing in Current Password but it does not exist.
After a little digging to see why it looks like the user's protectedAttributesList contains "password" when in full-stack mode, which tells the ui to protect changes to password by collecting the Current Password, but it's not in that list when idm is in default mode. The UI logic for this is found in
openidm-ui/openidm-ui-enduser/src/main/js/org/forgerock/openidm/ui/user/profile/signInAndSecurity/EditPasswordPageView.js around line 39 (see screenshot)