Calling 3rd party Restricted API in conversation which ask for authentication

Rasa Open Source
1

During the conversation user click on show my tickets. Bot will ask to authenticate through URL. User will click on it and it will get authenticated using SSO of logged in outlook user. How to get that ?

2

Two ways:

  1. Authentication as part of a custom action
  2. Authentication handled from front end and passed on to rasa server