1. A method for providing a third-party application with access to encrypted content in a cloud-based environment, the method comprising: in response to a request to access the encrypted content of a workspace in the cloud-based environment, providing the third-party application with an identity verification of a user if the user is not already logged into the workspace, wherein the identity verification is generated from a server hosting the cloud-based environment; upon the verification of the user's identity, transmitting an authentication token to the third-party application, the authentication token allowing the third-party application to access the encrypted content of the workspace in the cloud-based environment without verifying the user's identity, wherein the authentication token includes a decryption key to decrypt the encrypted content; providing the requested encrypted content to the third-party application; decrypting the encrypted content with the decryption key included with the authentication token; and in response to receiving a request to store content in the workspace from the third-party application, preventing the third-party application from storing the content, wherein the content is exclusive of the requested encrypted content.