Can Confluence Data Center PATs be generated via API for passwordless Entra service accounts?

[funky]

We're running Confluence Data Center with Microsoft Entra ID as our user directory. All users, including service accounts, are synced automatically to Confluence via Entra.

Our current flow: create a service account in Entra → log into Confluence UI → manually generate a PAT → use that PAT for integrations.

The problem: we're moving toward agent/service accounts in Entra that are passwordless — no password, no SSO capability. These accounts can't log into the Confluence UI or authenticate via SSO, so we have no way to generate a PAT through the normal flow.

Is there a Confluence Data Center REST API endpoint that allows PAT generation for a user without requiring that user to authenticate via UI or SSO? Ideally we'd want an admin-level API call that can create a PAT on behalf of these passwordless service accounts so we can use them for integrations.

[Rilwan Ahmed]

Hi @funky ,

In Confluence, administrators cannot natively generate Personal Access Tokens (PATs) on behalf of other users. 

Is there a Confluence Data Center REST API endpoint that allows PAT generation for a user without requiring that user to authenticate via UI or SSO?
--> No.  In order to create the PAT through the REST endpoint ,user will need to make sure to authenticate self on the request. 
All details in https://confluence.atlassian.com/enterprise/using-personal-access-tokens-1026032365.html

[funky]

Hoo ok TQ