Authentication relies on OAuth 2.0 client credentials; once a token is obtained, it must be included in the Authorization header as a bearer token for each request.
Getting the token
The integrations team will provide you with the sandbox credentials;
The value for grant_type should be "client_credentials".
After get a Token
The token must be included in the Authorization header for each request. It has an expiration time of one hour, after which you will need to obtain a new one.
For instance, a quote request should look like this: