The Authentication API in Ping Identity PingFederate prior to 10.3 mishandles certain aspects of external password management.
pingidentity pingfederate