**As** an administrator
**I want to** be able to accept JWTs issued in a client credentials flow,
**so that** SCIM requests can be authenticated without configuring additional secrets.

**Acceptance criteria**

* JSON Web Tokens issued to another client can be processed

* Instead of authenticating an OpenProject user they should authenticate Begin of the insertiona service accountEnd of the insertion Begin of the deletion \[something else\]End of the deletion

* Begin of the insertionThe service account isEnd of the insertion Begin of the deletion TBD: Authenticate a SCIM-Client? Authenticate something that'sEnd of the deletion associated to a Begin of the insertionSCIM-ClientEnd of the insertion Begin of the deletion SCIM-Client?End of the deletion


**Technical notes**

* It probably makes sense to understand and think about the general concepts involved in authentication

* Begin of the insertionThe service account should probablyEnd of the insertion Begin of the deletion Should somethingEnd of the deletion inherit from Begin of the insertionprincipalEnd of the insertion Begin of the deletion Principal or is the Principal too close to a User?End of the deletion