If you attempt to use a "protected" URL in an iframe, you can provide a Token URL in the settings. However if you want to use password authentication, you need to manually login within the iframe itself. You should be able to specify the username/password in the iframe settings when working with Grafana.