**As** Begin of the insertionan administratorEnd of the insertion Begin of the deletion a \[enter role of user\]End of the deletion
**I want to** Begin of the insertionbe able to accept JWTs issued in a client credentials flow,End of the insertion Begin of the deletion \[enter objective\]End of the deletion
**so that** Begin of the insertionSCIM requests can be authenticated without configuring additional secrets.End of the insertion Begin of the deletion \[enter desired result\]End of the deletion

**Acceptance criteria**

* Begin of the insertionJSON Web Tokens issued to another client can be processed

* Instead of authenticating an OpenProject user they should authenticate \[something else\]

* TBD: Authenticate a SCIM-Client? Authenticate something that's associated to a SCIM-Client?


End of the insertion Begin of the deletion <br>


End of the deletion **Technical notes**

* Begin of the insertionIt probably makes sense to understandEnd of the insertion Begin of the deletion <br>


**PermissionsEnd of the deletion and Begin of the insertionthink about the general concepts involved in authenticationEnd of the insertion Begin of the deletion visibility considerations**

* _To whom is this feature visible?_End of the deletion

* Begin of the insertionShould something inherit from Principal orEnd of the insertion Begin of the deletion _WhenEnd of the deletion is Begin of the insertionthe Principal too close to a User?End of the insertion Begin of the deletion it not visible?_


**Out of scope**

* <br>End of the deletion