Can you provide more context? How are you calling the API's? What are you trying to do with them? Most of the time, they are being called from ServiceNow, and since ServiceNow doesn't support Windows Auth, you must enable Basic Auth in IIS on the App Broker server. When you make the call, you send an authentication header that matches the type of authentication enabled on the API folder in IIS (e.g. Basic Auth or Windows Auth). The account that is making the API call must also be granted REST API security permissions within the App Broker admin UI.
Anything expressed here is my own view and not necessarily that of my employer, Flexera. If my reply answers a question you have raised, please click "ACCEPT AS SOLUTION".
