why is dovecot "Allowing any password"

[mj]

On 03/21/2018 10:34 PM, @lbutlr wrote:
> The question is does it allow remote users to login with no password?
Yes, and the answer is: no.

> If not, then the message ie nearly notification that login without a password is potentially possible.
Yes, but a worrying one. That's why i decided to post here.

> I have no idea why you would have nopassword=y set in the first place, so it seems the simplest way to eliminate this problem is to take that out and have a secure environment for sending mail.

Yes, however, for SOGo with Native Outlook compatibility or SAML logon, 
the config is required.

(https://sogo.nu/files/docs/v2/SOGoNativeOutlookConfigurationGuide.html)

Thanks,
MJ