The client credentials grant (using a seperate client ID and client secret for each customer) will likely be the best solution for this. Here is a topic that discusses it, and some of the limits on creating new applications. Feel free to ask questions if you have them. Do you know roughly how many customers/applications you plan on supporting?