Newbie here.  Apologies if this question has been answered before.

We will need to display applications from other platforms inside an iframe of a WYSYIWYG Collaborate page.  But we want to ensure that the HighQ user (often an external user) making the request has sufficient access rights in the other platform, and also to limit what data is returned by the other application.   For example, show information from our CRM system (info that cannot simply be synced to an iSheet) about a specific client to users who work for that client.

What methods are used to achieve this goal?

Does Collaborate support a workflow like this:

• Pass a request to the other platform with information that uniquely identifies the user, such as email address and a token generated by Collaborate (perhaps this request is made via Ajax or just included as parameters of the src value in the iframe)
• The other platform receives the request with the identifying information and confirms that a user with that email address has access to the external application.
• If the user is confirmed to have access, the other platform makes an API call back to Collaborate, including the email address and token and Collaborate confirms if that token is associated with the user and is otherwise valid.
• If Collaborate confirms this in the REST response, the other platform ensures the identify of the user making the request and serves up the appropriate information

The key piece here would be access to a token generated by Collaborate and then the ability to confirm that token via an API call later.