2: Set up Change Password Notifier for Microsoft Entra ID

You're on step 2 of 3

Copy the Microsoft Graph Change Tracking object ID

1. Open the Azure portal.
2. Select Manage Microsoft Entra ID.
3. On the left, select Enterprise applications.
4. At the top, remove the Application type filter.
5. Search for Microsoft Graph Change Tracking and copy the object ID. You will use this in Deploy the marketplace application in your Microsoft Entra ID tenant.

Accept the use of the CPN app

As a Microsoft Entra ID tenant administrator, you must consent to using the app. CPN for Microsoft Entra ID is added from Microsoft Entra ID marketplace to subscribe to Microsoft Entra ID notifications. Click here to consent.

Deploy the marketplace application in your Microsoft Entra ID tenant

1. In the Azure portal, open the ChromeOS Change Password Notifier page.
2. Click Create.
3. Create a new resource group or select an existing resource group to use for the application.
4. In the Service Account field, select the folder to upload the json file created and downloaded in Step 1.
5. In the Microsoft Graph Change Tracking field, paste object ID you copied in Copy the Microsoft Graph Change Tracking object ID.
6. Enter the application name.

7. Click Review + create.

8. Read the Terms and Conditions and select I agree to the terms and conditions above.

9. Click Create.

Configure the Google Admin console to receive signals

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  DevicesChromeSettings. The User & browser settings page opens by default.

   If you signed up for Chrome Browser Cloud Management, go to Menu  Chrome browserSettings.

3. To apply the setting to all users and enrolled browsers, leave the top organizational unit selected. Otherwise, select a child organizational unit.
4. To activate SAML single sign-on password synchronization, go to Security:
   1. Click SAML single sign-on password synchronization flows:
      • Choose whether you want to enforce online sign-ins for the login screen only, or for both the login and lock screen. For details, see Set Chrome policies for users or browsers.
      • Click Save.
   2. Click SAML single sign-on password synchronization:
      • Select Trigger authentication flows to synchronize passwords with SSO providers. For details, see Set Chrome policies for users or browsers.
      • Click Save.