Thanks for the clarification. With Platform SSO enabled, is it possible to support a fully passwordless experience at the macOS login window and lock screen, without requiring a local account password fallback ?

Would using SMAppService help here ?

Yes Example: sysadminctl -resetPasswordFor TestUser -newPassword - -adminUser TestAdmin -adminPassword -