what two steps are required to ensure that a change to one Single Sign-On instance is propagated to the other instances?