1. A method, comprising: receiving, at a first domain, a first request from a device of a user to make a resource accessible; generating a token that includes a time-to-live; storing the token; in response to the first request, sending to the device of the user the token and an instruction to transmit the token to a second domain; in response to the second domain receiving from the device of the user a second request to access the resource, the second request including the token: determining that the second request to access the resource includes the token, verifying that the token is stored and the token has not expired, and permitting access to the resource via the second domain in response to the verifying.