To begin using the API, request the system to create a session object. In this request, supply your credentials in an authorization header of the form prescribed by the identity provider that your organization uses. The response includes an authorization token, which you must include in subsequent requests.
Every version of the vCloud API supported by VMware Cloud Director has a login URL that a client can obtain by making an unauthenticated GET request to the API/versions URL. See example: Retrieve the Login URL and List of Supported API Versions. Because all other vCloud API requests must be authenticated, any vCloud API workflow must begin with a login request that creates a session and returns an authorization token in the value of the x-vcloud-authorization header. The token must be included in subsequent vCloud API requests.
To create a session object, supply your credentials in an authorization header of the form prescribed by the identity provider that your organization uses, then POST a request to the vCloud API login URL. This request does not have a body. All the information required to create a session is included in the authorization header.