This video goes over setting up the external API as far as the user, roles, and permissions as well as the application key and token generation to use.