We're running Confluence Data Center with Microsoft Entra ID as our user directory. All users, including service accounts, are synced automatically to Confluence via Entra.
Our current flow: create a service account in Entra → log into Confluence UI → manually generate a PAT → use that PAT for integrations.
The problem: we're moving toward agent/service accounts in Entra that are passwordless — no password, no SSO capability. These accounts can't log into the Confluence UI or authenticate via SSO, so we have no way to generate a PAT through the normal flow.
Is there a Confluence Data Center REST API endpoint that allows PAT generation for a user without requiring that user to authenticate via UI or SSO? Ideally we'd want an admin-level API call that can create a PAT on behalf of these passwordless service accounts so we can use them for integrations.
