A system and method that allows an applicant to select a third party to provide data to populate a plurality of fields of a web-based form, a communication interface that receives a selection of the third party to provide data to populate the plurality of fields of the web-based form and an application server, that transmits a third-party application programming interface (API) call to the at least one selected third party; transmits data indicative of an authentication request associated with the selected third party; and receives a security token in response to a validated authentication request, the security token enabling communication between application server and the third party system via the third party API, wherein the enabled communications is based on a set of permissions, each permission associated with a specific data field in the web-based form.