The only way to create a "third-party" integration is to ask your customer to create application credentials for you? Are there any plans to improve this?
Aside from a poor developer experience, it creates a problematic coupling -- what happens if that customer relationship ends? I imagine it could elicit concerns from the client as well, since the application is outside of their organization.
(It seems like it would be useful to support the delegation of authority across organizational boundaries.)