SELECTED ANSWER
replied on August 14, 2023
Hi Michelle,
By default, the Workflow Web Service (API) uses IIS Windows Authentication (Kerberos/NTLM).
If you make the API call from something that can authenticate that way (e.g., Workflow itself or other Windows services), it'll generally work automatically you're good to go. Many API testing clients like Postman cannot, so you'll get that 401 Unauthorized. You can test making API calls from Workflow itself with the demo Workflows I've attached (drop the .txt and import).
You can optionally enable Basic Authentication on the Workflow IIS application (within IIS) and pass credentials for basic auth. If you go this route, please be conscientious of the security implications.