When integrating with a third party that supports neither idempotency keys nor find-or-create nor sender-chosen IDs, the right first move is to negotiate: ask the provider to implement idempotency-key support — it often works. If they are unresponsive, consider switching API providers. As a last resort, accept duplicates and compensate for them.