I'm working under our solution of the Softphone using OpenCTI. Now I need to authenticate our customer's users through our OAuth2 provider. How I understood the best practice for using external authentication service is making a Custom External Auth. Provider. But I can't figure out how I should deploy this solution to customers.
The first problem that Callback URL is generated on Auth. Provider creation and the second problem that field Execute As is required for creating Auth.Provider.
Perhaps it is OK to force customer's salesforce administrator to make some work, but I think there is another best practice for that.