Is one-time secure linking step acceptable for embedded app

Hey @Corey!

Can you share the exact criteria that your app review failed on?

Our best practices for integrating are listed here: Integrating with the Shopify admin

Based on what you have shared, the issue looks to be around the button in your UI; instead the one time verification should immediately follow the authentication steps. From the doc I linked above:

The first step to the in-admin onboarding of these apps must always be a workflow that enables a merchant to link the current store with their existing credentials.