FlowWright supports API token authentication; an API token can be generated using the FlowWright UI and shared with the user as a one-time password for authentication. 

You'll need to navigate to the Administration - User Management page. Select the active user from the table and click on the View - Generate API Token menu option.  

Below is a popup window. To validate the token, you must provide the time value duration in minutes. Click on the Generate button to initiate. 

The API Token is displayed in the popup window. Click the Copy button to paste the token to the clipboard. Alternatively, you can generate another token using the Generate button. 

The user shall log in using the FlowWright application login URL with the API Token in a new browser window.

http://<your domain>.flowwright.com<your port no>/Login?authkey=apiToken&culture=en-US&ReturnUrl=&apitoken=<the above token value>

I've included the sample URL here for you to refer to. 

http://single.qa.flowwright.com:8080/Login?authkey=apiToken&culture=en-US&ReturnUrl=%2fUser&apitoken=eyJhbGciOiJSUzUxMiIsInR5cCI6IkpXVCJ9.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.NU7cltOxmIrBoGdPJmPnM5bHh8n77kySRTplucIOe6YJJea2N2EWbNApSfea0KbIW8_IeDJHGF6sJ-RVbJhj_B6kHRo5WPKM-LjZz0nmX-vkgFgL_tse9EA7GwILO-XSLwqulNAHpyzzwKiAhRfw9pW-QZnvP4n6oXdCr2YbbStv2yo6ekFNMCnk4DCCkykmLu1P0NB6ulnLg6678I9CPF3qirRiN5kPOUFe2-qOB1ymAiTDo2PwnMJBGv7lFLQ3YErU7tebLLAR3tuapJUBitFJjRm2z9TR4S9gtXRXbcZuycOWUKYWP1RHcm1g81IN5qfztoNXlZLyGwumm8rUMQ

The authentication is successful if the API Token is utilized within the valid time, as shown below. 

The authentication fails if the API Token has expired, as below.