What is the recommended approach when connecting a BTP custom app to Cloud Integration?

Hello,

We have a custom app on the Cloud Foundry that needs to make requests to our Cloud Integration tenant. What is the recommended authentication method for this?

We have several integration flows exposed as a SOAP service endpoint and we intend to use User Role auth on the iFlow so what is the best approach when configuring the service instance to allow communications from SAP BTP to SAP Cloud Integration (which is also on Cloud Foundry)?

At the moment we intend to use a "destination" to configure the communication from SAP BTP to Cloud Integration.

Best regards,