You may have issues using authentication with REST at runtime if you do not install the relevant products correctly.
Note: You must follow the installation instructions carefully, in particular you must stop the server during installation when instructed. If you do not, then when you are using REST, an invocation can fail with an authentication error.
TIBCO ActiveMatrix BPM
You need to install the Server and then the Hotfix as described in the README.
When you install the Hotfix, the Server must be stopped (make sure it is stopped, even if it is running in the background).
Configure Basic Authentication using the Governance App
Manually generate the 'Keystore' containing the security credentials (username/password to call BPM REST API's).
Once the keystore is generated, create the identity provider which uses the generated keystore to supply identity. (Directly provide the identity provider name as a Governance App name in the REST participant.)
For detailed steps, see the topic "Creating a Keystore Containing the Security Credentials to Run the Business Process" in the
Accessing External Data and Services tutorial.