[Home](./index.md) > [ibm-cloud-sdk-core](./ibm-cloud-sdk-core.md) > [IamAuthenticator](./ibm-cloud-sdk-core.iamauthenticator.md) ## IamAuthenticator class The IamAuthenticator will use the user-supplied `apikey` value to obtain a bearer token from a token server. When the bearer token expires, a new token is obtained from the token server. If specified, the optional, mutually inclusive "clientId" and "clientSecret" pair can be used to influence rate-limiting for requests to the IAM token server. The bearer token will be sent as an Authorization header in the form: Authorization: Bearer <bearer-token> **Signature:** ```typescript export declare class IamAuthenticator extends IamRequestBasedAuthenticator ``` **Extends:** [IamRequestBasedAuthenticator](./ibm-cloud-sdk-core.iamrequestbasedauthenticator.md) ## Constructors

Constructor	Modifiers	Description
[(constructor)(options)](./ibm-cloud-sdk-core.iamauthenticator._constructor_.md)		Create a new IamAuthenticator instance.

## Properties

Property	Modifiers	Type	Description
[requiredOptions](./ibm-cloud-sdk-core.iamauthenticator.requiredoptions.md)	`protected`	string\[\]
[tokenManager](./ibm-cloud-sdk-core.iamauthenticator.tokenmanager.md)	`protected`	[IamTokenManager](./ibm-cloud-sdk-core.iamtokenmanager.md)

## Methods

Method	Modifiers	Description
[authenticationType()](./ibm-cloud-sdk-core.iamauthenticator.authenticationtype.md)		Returns the authenticator's type ('iam').
[getRefreshToken()](./ibm-cloud-sdk-core.iamauthenticator.getrefreshtoken.md)		Return the most recently stored refresh token.