1. A method, comprising: receiving, at a first domain, a request from a user to make a resource accessible; generating a token that includes a randomly generated identifier and a time-to-live; storing the token in a record including a user identification, tenant identification, and information for accessing the resource; sending to the user the token and an instruction to transmit the token to a second domain; receiving, at the second domain, a request access the resource, the request including the token; determining that the request to access the resource includes the token; verifying the token by determining that the token is stored and the token has not expired; and permitting access to at least one record containing the token by executing computer code.