From 0055d21f0c097b77b0fdcb2d1687aa77e4f63a6d Mon Sep 17 00:00:00 2001
From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com>
Date: Tue, 31 Oct 2023 12:07:07 +0000
Subject: [PATCH] Updates API Authentication section (#4068) (#4130)

(cherry picked from commit 23c1dbeb9da57e3728d346af43f99ea1ae5cf490)

Co-authored-by: natasha-moore-elastic <137783811+natasha-moore-elastic@users.noreply.github.com>
---
 docs/siem-apis.asciidoc | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/docs/siem-apis.asciidoc b/docs/siem-apis.asciidoc
index 458d9ca79f..4aaa691c81 100644
--- a/docs/siem-apis.asciidoc
+++ b/docs/siem-apis.asciidoc
@@ -49,8 +49,17 @@ NOTE: You can find space URL identifiers on
 [float]
 === Authentication
 
-Token-based authentication, using the same username and password used to log in
-to the Kibana UI, is required to access the APIs.
+The {elastic-sec} APIs support key- and token-based authentication.
+
+[float]
+==== Key-based authentication
+
+To use key-based authentication, create an {kibana-ref}/api-keys.html[API key], then specify the key in the header of your API calls.
+
+[float]
+==== Token-based authentication
+
+For token-based authentication, use the same username and password that you use to log in to the {kib} UI. In a given HTTP tool, and when available, you can select to use its **Basic Authentication** option, which is where the username and password are stored in order to be passed as part of the call.
 
 [float]
 === API calls