Google Apps has a web page where users can change their mail client password, but unfortunately it doesn't work when SAML is enabled. If you still want your users to be able to change their mail client passwords, make sure to enter your Google Apps admin email and password on the Google Apps app under Manage Apps.

This allows end-users to change their mail client password via the dashboard. Click on the Google Apps entry and then select Change Password on the next page.