Authentication Options

Need some help trying to figure out my authentication options for using the embedded service in an app owns data scenario.

Is the only way to authenticate and generate tokens by using your AD credentials? I have went through the examples and got everything running just fine but....

Here at the university that I work at our credentials change every quarter. This means all 10 or so apps where I need embedded reports will have down time as I update this information. This is going to create a lot of work. Not only that but I really don't like the idea of the rest of the developers on the team having access to my personal AD account which is tied to lots of other personal university resources..payroll.. etc..

Am I missing something is there not another way to go about setting this up?

Thanks for your help.