Before you begin with Change Password Notifier for Active Directory (CPN for AD), make sure you create a service account, with domain wide delegation, and a key. Then, enable the chromedevicetoken API.
You're on step 1 of 3
Create a service account and key
- Open https://console.cloud.google.com/iam-admin/serviceaccounts.
- On the top-left, select project. If you have no projects, create one.
- On the left, make sure the Service Account tab is open.
- Click + Create Service Account.
- Enter a Service account name and ID.
- Click Create and Continue.
- For Role, select ProjectOwner.
- Click Continue.
- Click Done.
- Next to the role you created, clickMore.
- Click Manage Keys.
- Click Add Key.
- Click + Create Key.
- For Key type, select JSON.
- Click Create.
- Download and save the key file. You need it to launch the CPN for AD instance.
- Open https://console.cloud.google.com/iam-admin/serviceaccounts and open the service account details for the service account that you just created. Copy the account’s Unique ID.
Activate domain wide delegation for service account
- Open https://admin.google.com/u/2/ac/owl/domainwidedelegation.
- Click Add new.
- In Client ID, paste the copied service account ID.
- Add one OAuth scope:
https://www.googleapis.com/auth/chromeosdevicetoken
- Click Authorize.
Enable the chromedevicetoken API
- Open https://console.developers.google.com/apis/dashboard.
- Click + Enable APIS and Services.
- Search for the chromedevicetoken API.
- Click Enable.
Google and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.