As a quick starting point the below workflow should help. Just don’t forget if you ever share it to remove the username and password from the Get Token node.
This makes sense. My colleague just now did almost exactly this but put the headers in a Custom Auth credential so we can still separate the credentials and the workflow. Thanks for the help!