Java EE (Java Enterprise Edition) General Discussion

I'm writing a web app and have been asked to give a read only functionality to it that can be accessed from another site. They want to generate a link on the other site that will log in and load my application. I have already got it working where they just build an href to:

myApp.do?userId=XX&password=XX&someOtherStuff

But I don't like this solution as it displays the password in the address bar.

What are some other solutions? Build a servlet that accepts this link, logs in, and then forwards it to another page? Seems like he should be encoding the password on his end, but he said he is just going to be sending it clear text.

Any suggestions would be appreciated.