Oh right, the same-origin policy stuff! But you should be able to use modals at least in the process of the account creation, the more critical one, or are there other security concerns? Or mybe an iframe with a CORS setting on the provider side could be a solution.