Provision a user

Create an account for each end user through the Account API. Every user gets a client_id; the JWT your app mints for that user must carry the client_id claim so Gateway requests are scoped to the right account.

Mint and cache one token per active user rather than a single partner-wide token. A token issued without a client_id claim isn't scoped to any end-user account and can't trade on one.