It seems like their API has evolved since a couple of years and we can create and access a PAP user now without setting or passing a password.
This was not true two years ago and we had to store the pass temporarily.
We have changed the process today and do not store or send any longer any password from joomla, So the only solution is to go through our joomla jump integration which loads the user with their API

Thanks a lot for bringing this to my attention, because we could have continued that wrong way for a lot of time

I appreciate your help
Jean