That's kind of what I was thinking - although I wasn't sure how to handle passing data from the context of that record along with authentication to the external app. Is this where a Suitelet would come into inject HTML?