PAM provides capability to change password of the database and application credentials after every check in. You can configure to either allow PAM to perform the password change or delegate this task to the Identity Manager. If you want PAM to perform password change after every check in, you must add the password change script as part of the resource configuration.
These password change scripts are imported automatically when you use a policy template to configure a resource. For information about policy template, see Policy Templates. If you have added the resource manually, you can copy the out-of-the-box password change scripts from Password Reset Scripts.
For more information about configuring password management for database and application, see Contextual Help. To see the contextual help, click Credential Vault > Application or Database > Vault Name Help icon.