Get their permission, preferably in writing. If they love your product, you might also ask for a testimonial. The last company for which I worked usually added

Get their permission, preferably in writing. If they love your product, you might also ask for a testimonial. The last company for which I worked usually added a clause stipulating that they could not be identified as a customer without explicit permission.