Token translation behind the firewall