One token for all agents. However, I would be interested in understanding the solution for both scenarios, if they are different. 

Hello, I am approaching a similar scenario where I may need to authenticate with a 3rd party web service using a secret. As mentioned in a previous post, "you should not be hardcoding this information in the JS, so you will need to retrieve this data...