Video/Component overlay extensions, at time of writing, cannot link out at all. (There are exceptions to this rule)
But yes the correct flow would be
- Link out (making a new window)
- Users clicks yes/no
- User is redirect back to your EBS
- EBS handles final steps of oAuth