I'm developing a Zoho related desktop application (Windows .NET) app.  Specifically this is a screen pop application that interfaces to a phone system and in response to calls, looks up contacts that match the phone number and display the contact names to a user.

I'm confused by the whole self client deal and in particular, what the best practices would be for a user to configure and use this application.

Right now, every time out app needs to authenticate with Zoho I have to go and generate a new client code and then configure my app to use it along with the client ID and client secret.

This seems really painful, especially for end users.  Unless I'm missing something, in order for a new users to use our app they would need to create a new client ID and make sure to record the associated client secret and then use those to create self client token and finally configure our app with the three values and have it connect fairly quickly before the self client token expires.

Is this what we have to do?  This seems like a real pain point as users need to go through a multi-step, error prone process!