Within the ArcGIS Server Javascript API you can link to or embed a resource from ArcGIS.com but only if that resource is publicly shared. It would be very useful to be able to provide access to non-publicly shared resources through the API and to be able to pass in a token or user/password to access restricted content.