The Web Services API uses an HTTP Basic authentication scheme to manage authentication between the remote server and your appliance. You need a valid user account on your appliance with the API Analyst or API Monitor profile. You provide the user name and password in an HTTP POST authentication request to your appliance. If the user is authenticated, your appliance provides a session token that maintains authentication for the duration of the current session.
Note
The user account must be established on the appliance you are using to run the Web Services API before you can establish a session between the remote server and your appliance. For more information about setting up user accounts on your appliance, see the System Administration Guide for your appliance.
Note
If your account requires the password to be changed when you run the authentication request, an error is returned, and you must change your password to continue using the API. To avoid an interruption in service, Trellix recommends changing passwords before they expire.
Note
The request must be made using the HTTP POST method.