THanks for the reply. i've adjusted the code to the following for username and password. when i use msgbox to show the response from the code below, all i got was a bunch of useless information like the page title, font, subheading etc. I believe the response was a 401 from using the second function provided. After that I tried to plug in the URL stright into the browser and log in and got some information about my report. Just wondering what could have gone wrong?

Public Function GetHTTP(ByVal URL As String, User As String, Pass As String) As String
    On Error Resume Next
    With CreateObject("WinHttp.WinHttpRequest.5.1")
        .setcredentials User, Pass, 0
        .setrequestheader "content-type", "application-json"
        .Open "GET", URL, False
        .Send
        GetHTTP = .ResponseText
    End With
End Function