A provisioning service datacenter provides a key transfer from a web service datacenter over a first secure channel. In certain versions, the provisioning service datacenter transmits an email having a hashed link to a partner site in response to a key request provided by the partner site. Certain roles at the partner site can respond to the email, thereby returning the hashed link to the provisioning service datacenter. Thereupon, in certain versions, the request is forwarded to a web service datacenter, and a secure channel is provided over which a key can be forwarded to the provisioning service datacenter, and thereupon to the partner site. In certain versions, the key is used to establish a second secure channel.