Setting up and maintaining integrations can often entail some handling of sensitive information.
...
Here are some suggestions:
Ask costumers custumers to add apps themselves:
You may ask your clients to register applications in their account themselves. This avoids the sending of credentials over the internet, as the client can register the information directly into their Canvas account.Use secure sharing methods:
If sensitive data must be shared, we recommend using more secure methods . We have developed a SecureShare solution which you could potentially use this.
When sending information via SecureShare the sender will receive a one-time code, and the recipient will receive an email with a temporary link. To open the link, the recipient must have the one-time code.
The code can be sent via normal email, text message, or other methods. The link can only be opened once using the one-time code, and the link will be made invalid after 72 hours.
(not email).