It would be really helpful to add the token url parameter in dashboard so that you can share a private dashbaord through a background managed authentication.
An alternative would be to have the possibility to release public content with a sort of secure URL, not indexed and available only if you type it correctly end entirely in the browser (i.e. google drive).
In this way we can embed "securely" our agol applications inside other portals.
