We changed password in Active directory and now our system is not pushing the new passwords to CAM.
Proxied Form Filled Applications not pushing primary credentials.
CAM keeps old password in wallet.
This behavior is described in the following documentation: CAM Configuration Guide
"Primary Credentials are the username and password that were used to authenticate to Cloud Access Manager. They will only be captured and saved when a login form, through the local built-in identity provider is used to authenticate the user. Authentication using either Kerberos, a smart card, or a federated identity provider will not update Primary Credentials."