3. What is the nature and description of the request?

 Prevent usage of service account OAuth tokens for external access

4. Why does the customer need this? (List the business requirements here)

 
Service account tokens currently have no validity period. This is troublesome from a security point of view, because it allows a user to copy such a token, and use it from outside of the platform. While in some cases this is justified, for most cases, for cases where it is not identified as OK, it should be prevented. Otherwise, even people that leave the company could keep using such a token for access to the platform.

5. How would the customer like to achieve this? (List the functional requirements here)

 We would like to maintain a whitelist (to be defined by the administrator) of service accounts which can access the platform from externally (to the platform).

6. For each functional requirement listed in question 5, specify how Red Hat

and the customer can test to confirm the requirement is successfully implemented.

 yes