Merge IAM to API request for credential validation. Create functionality to lookup on database to compare the header request authentication token to the administrator created credentials. Convert username and password to base64.