Statement Generator APIs use basic authentication. The user name is the email address that you use for logging in Zuora. The password is the API token that is shown in the settings of Statement Generator.
To learn more about the configuration and usage of Statement Generator, see Statement Generator.