As a note, we also considered passing tokens via URL parameters, but discarded this idea. The URL parameters are secure sockets layer (SSL) encrypted for the transport but might be logged in plain text on the servers and the browser history. We could also not simply provide the token with a RESTful POST request from the ELN to the AiiDAlab, as the latter currently implements no REST API, but efforts are ongoing to enable it. We emphasize that, to disable the integration, users can simply delete the token using a custom frontend page provided in the ELN, or delete the token in the ELN setup page of AiiDAlab.