The ExpressAPI currently supports Basic Auth with Base64 encoding, and the security relies on communication on the HTTPS layer.
Auth API
The Auth APIs provide two endpoints, one each for Login and Logout.
Any access to the ExpressConnect APIs should be authenticated through the ExpressConnect Auth APIs to comply with the TRIRIGA licensing requirements.