Apple School Manager

Password changes originating in a federated domain in Apple School Manager
If a user’s password is changed in Microsoft Azure AD, Apple School Manager invalidates the current session with that user. The user must sign in again with their new password to continue using federated authentication for access.