Specops, an Outpost24 company, has introduced an authentication API that allows businesses to verify employee identities directly through AI chatbots, applications, and automated workflows before sensitive requests are processed.
The issue has become more pressing as companies give AI assistants access to internal systems and allow them to carry out tasks on behalf of employees. A chatbot handling a password reset, for example, needs to establish that the person making the request is actually the account owner.
A case involving Meta showed what can happen when these checks fail. In June 2026, the company disclosed that attackers had exploited a flaw in its AI-assisted Instagram account recovery system to obtain password reset links for accounts they did not own. The incident potentially affected 20,225 accounts.
Specops’ new Authentication API allows companies to add identity checks to existing workflows. If an employee asks an internal chatbot to reset a password, the system can request verification through an authentication method already set up for that employee.
The API returns the result, which the workflow can use to approve or reject the request, or send it for further review. After successful verification, it can also reset passwords and unlock accounts.
Employees do not need to install another application or go through a new enrollment process. The API uses authentication methods they already have in place. Microsoft Active Directory is required to manage employee enrollments, but integrations are not tied to a particular platform.
Companies can connect the API to their chosen chatbot, IT service management system or other business applications.
Organizations decide which actions require identity checks and what happens after verification. The system also records verification events, giving IT teams a record for audits and security reviews.
“Organizations are increasingly trusting AI chatbots to do more than answer questions. They’re giving them the ability to initiate actions that previously required a human employee. But if those systems can’t reliably verify who is making a request, they risk automating the same impersonation vulnerabilities that attackers have been exploiting for years,” said Darren James, Senior Product Manager at Specops Software.
The API is not limited to AI chatbots. Companies can also use it with IT service management platforms such as ServiceNow during employee onboarding and in workflows where employees need to verify each other’s identities.
Specops provides the API, technical documentation and verification services. Companies will build their own integrations based on their systems and security requirements.
