As we will eventually need hosting environments, how does DevSandbox work with non-prod hosted instances? We need, today, the Prod SSO token to pull of any API call to the DevSandbox K8s instance. Will this be a sort term block? Do we need a service for wherever our UI is hosted to be able to communicate to the Prod SSO login server and get the token?

Acceptance Criteria

• Determine what the intent is from DevSandbox / AppStudio in relation to always needing a Prod SSO Token
• Spike out / sketch out what the effort would be to build a service that can be used to fetch the Prod SSO token wherever we need it (ephemeral envs, along side DevSandbox on their hosting, etc)