We should implement service accounts: accounts that are created at Ipsilon itself (not self-service, by the admin), that have a particular set of scopes they can request OIDC tickets for.
Log in to comment on this ticket.