chore: Updated readme to provide information on generating IAM access token
@@ -137,12 +137,20 @@ If you'd prefer to set authentication values manually in your code, the SDK supp
### IAM
-IBM Cloud is migrating to token-based Identity and Access Management (IAM) authentication. IAM authentication uses a service API key to get an access token that is passed with the call. Access tokens are valid for approximately one hour and must be regenerated.
+IBM Cloud has migrated to token-based Identity and Access Management (IAM) authentication. IAM authentication uses a service API key to get an access token that is passed with the call. Access tokens are valid for approximately one hour and must be regenerated.
You supply either an IAM service **API key** or an **access token**:
- Use the API key to have the SDK manage the lifecycle of the access token. The SDK requests an access token, ensures that the access token is valid, and refreshes it if necessary.
- Use the access token if you want to manage the lifecycle yourself. For details, see [Authenticating with IAM tokens](https://console.bluemix.net/docs/services/watson/getting-started-iam.html).
+- For untrusted environments use a server-side token generator to generate access tokens for your environment using your IAM API key. The generated access tokens will be valid for one hour and can be refreshed.
+
+### Generating access tokens using IAM API key
+```python
+# In your API endpoint use this to generate new access tokens
+iamTokenManager = IAMTokenManager(iam_apikey='<apikey>')
+token = iamTokenManager.get_token()
+```
#### Supplying the IAM API key
