How to authenticate service account created with new service account feature when using SSO

[Marc Pincince]

I created a new service account using the new service account feature that is under the Directory tab of admin.atlassian.com. I created an api token for it too. Then I tried to use the following to test it, and I got "Client must be authenticated to access this request" as the result.

     curl -u "[the service account's email address]:[the service account's api token]" ^
     -X GET "https://[my site].atlassian.net/rest/api/3/project/search

I tried resetting the api token and even completely recreating the service account and still got the same result. My personal account email address and api token works with the above.

We have SSO enforced, using Microsoft Entra ID (Azure Active Directory) for our managed accounts. 

Any idea what I need to do to get my service account to work?

Thanks.

[Chitra Nagdeo]

Hey @Marc Pincince ,

Welcome to Atlassian Community!

Could you try using syntax https://api.atlassian.com/ex/jira/<cloudId>/{api} and test Authentication using Basic auth?

Article: Jira and Jira Align Integration: Creating an API Service Account

Regards

Chitra Nagdeo

[Marc Pincince]

Thank you for providing me the proper syntax, Chitra. It appears, though, that my enforcement of SSO is causing a problem because the service account is not set up in our organization's Entra ID (which I do not control). I am fairly certain this is because I cannot add the account to any groups to give it permissions without it being in our Entra ID and, through that, our managed accounts list. At least I'm a step closer because of you! Thanks again.

[Chitra Nagdeo]

Welcome @Marc Pincince happy to help!