From what I see , MS NPS isn't sending the user's password. I don't exactly know what that means , but it should mean something. I am not an expoert on MS NPS though , so my scope of knowledge about it and it's configuration is pretty limited.
Can you check why it's not sending the password ?
Please keep me posted about this as this is an edge case and an interesting one.