Headless Consumers

How do programmatic Consumers work in an environment that does not support redirection to a Service Provider's web site? that is, what credentials can we (a trusted service tier Consumer) obtain from a User which would allow us to interact on her behalf with selected Service Providers? Could we require Users to grant us (long-lasting, hopefully) rights during say, their registration with us? Is there an alternative?