1/2 See this example extension
You get the JWT, send the JWT up to your EBS
The EBS generates an App Access Token.
Extracts the userID from the JWT
Calls the Users API with the userID and the App Access Token
- Takes as long as it take 3-5 working day or longer seems average. Depends how busy the queue is.