JSON Web Token (JWT) is an open standard that helps in the secure transmission of information between API consumers and REST web services. You can create a JSON web token policy to assign to operations.
You can enable JWT authentication for APIs that meet the following criteria:
The associated process uses HTTP/SOAP binding.
The associated process uses basic authentication and defines the user groups and users who can access the process service URL at run time.
The associated process is published and exposed as a service.