How to authenticate service account created with new service account feature when using SSO

[Marc Pincince]

I created a new service account using the new service account feature that is under the Directory tab of admin.atlassian.com. I created an api token for it too. Then I tried to use the following to test it, and I got "Client must be authenticated to access this request" as the result.

     curl -u "[the service account's email address]:[the service account's api token]" ^
     -X GET "https://[my site].atlassian.net/rest/api/3/project/search

I tried resetting the api token and even completely recreating the service account and still got the same result. My personal account email address and api token works with the above.

We have SSO enforced, using Microsoft Entra ID (Azure Active Directory) for our managed accounts. 

Any idea what I need to do to get my service account to work?

Thanks.