Active Directory password change revokes APP tokens

Steps to reproduce

  1. Create app token for WebDAV connection and login to sync client 2.6.2
  2. Change password in Active Directory

Expected behaviour
Starting with Nextcloud 15
For password changes in external user backends the device-specific passwords are marked as invalid and once a login of the user account with the main password happens all device-specific passwords are updated and work again.

Actual behaviour
After login to Nextcloud using web browser, all app tokens (WebDAV and Nexcloud sync client) don’t work. I’ve also tested on another server with Nextcloud 15 - effect the same - token is permanently reset. However it does work when user is local not AD.

Server configuration
Operating system: Ubuntu 18.04

Web server: nginx-1.16.1

Database: MariaDB 10.4.11

PHP version: 7.3.13

Nextcloud version: 17.0.2

Updated from an older Nextcloud/ownCloud or fresh install: Fresh install

Could you help me with this please?