PAT for service accounts

Hi,

We have a service account setup in our EntraID IdP that is used to call the API. Now that we've enabled OIS, we're having difficulty setting up a PAT for the service account since typically nobody logs into the service account and accesses OneStream, so the account is unable to provision a PAT for themselves. Would anybody have any suggestions as to how to proceed?

Thanks!