1: Get ready to use Change Password Notifier for Microsoft Entra ID

Before you begin with Change Password Notifier (CPN) for Microsoft Entra ID, make sure you create a service account, with domain wide delegation, and a key. Then, enable the chromedevicetoken API.

You're on step 1 of 3

Create a service account and key

1. Open https://console.cloud.google.com/iam-admin/serviceaccounts.
2. On the top-left, select project. If you have no projects, create one.
3. On the left, make sure the Service Account tab is open.
4. Click + Create Service Account.
5. Enter a Service account name and ID.
6. Click Create and Continue.
7. For Role, select ProjectOwner.
8. Click Continue.
9. Click Done.
10. Next to the role you created, clickMore.
11. Click Manage Keys.
12. Click Add Key.
13. Click + Create Key.
14. For Key type, select JSON.
15. Click Create.
16. Download and save the key file. You need it to launch the CPN for Microsoft Entra ID instance.
17. Open https://console.cloud.google.com/iam-admin/serviceaccounts and open the service account details for the service account that you just created. Copy the account’s Unique ID.

Activate domain wide delegation for service account

1. Open https://admin.google.com/u/2/ac/owl/domainwidedelegation.
2. Click Add new.
3. In Client ID, paste the copied service account ID.
4. Add one OAuth scope:
   https://www.googleapis.com/auth/chromeosdevicetoken
5. Click Authorize.

Enable the chromedevicetoken API

1. Open https://console.developers.google.com/apis/dashboard.
2. Click + Enable APIS and Services.
3. Search for the chromedevicetoken API.
4. Click Enable.

Google and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.