Can the WebRequest activity use a proxy page?

I'm not quite sure what I'm asking here, but I'm hoping someone can shed some light on the use of proxy pages.   First, some background... 

 

I'm accessing the Esri geoenrichment service, which consumes credits and therefore requires credentials.  First I started with a plain html page (basically an esri sample), and implemented a proxy page as per the esri instructions.  The proxy config file stores the client id and secret, so the html page doesn't have to supply credentials.  From what I can tell, this is a good practice.  So far so good. 

 

Then, I jumped into the Geocortex workflow world.  I created a workflow that queries the esri geoenrichment REST endpoint.  I set ut up as a series of 2 WebRequests.  The first request supplies my ArcGIS Online username and password, and requests a short lived token.  The 2nd request then uses this token to query the geoenrichment endpoint for data.  It works great.

 

What I'm wondering though, is there a security issue with supplying my credentials via the web request?  It's an SSL protected site requiring Windows authentication.  But I don't want other authenticated users to be able to see my credentials.  Is there a way of using some kind of proxy page setup to do this instead of a webrequest? 

 

Any explanation would be appreciated.  I'm definitely over my skis a little when it comes to proxies/authentication etc.

 

Thanks!

 

Chris