Sorry for intruding this thread, but did you figured it out? As @drewpearce said - For remote HTTP services, DreamFactory supports any authentication mechanisms that can be passed through curl options, headers, or parameters. - were you able to send authorization headers correctly via dsp?
I'm using dreamfactory 2.3.1 and stuck in a similar issue. See here.