This was years ago, so their auth flow may be different now, but I built a Suitelet that had them input their HubSpot Account ID, which then sent the authorization request to HubSpot