When setting up an application, when prompted for the logon method select select ‘Cloud Access Manager should not log the user in’. CAM will then proxy the application but will not send any credentials. If the client-side application is sending credentials then these should be passed on to the application.