# Calling 3rd party Restricted API in conversation which ask for authentication

**URL:** <https://forum.rasa.com/t/calling-3rd-party-restricted-api-in-conversation-which-ask-for-authentication/43670>\
**Category:** Rasa Open Source\
**Created:** [May 17, 2021, 4:06pm UTC](https://forum.rasa.com/t/calling-3rd-party-restricted-api-in-conversation-which-ask-for-authentication/43670 "2021-05-17T16:06:21Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Avinashd](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.rasa.com/avinashd/32/14147_2.png) [@Avinashd](https://forum.rasa.com/u/Avinashd)\
**Post date:** [May 17, 2021, 4:06pm UTC](https://forum.rasa.com/t/calling-3rd-party-restricted-api-in-conversation-which-ask-for-authentication/43670/1 "2021-05-17T16:06:21Z")

</div>

During the conversation user click on show my tickets. Bot will ask to authenticate through URL. User will click on it and it will get authenticated using SSO of logged in outlook user. How to get that ?

---

<div class="post-metadata">

**Author:** ![mloubser](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.rasa.com/mloubser/32/13021_2.png) [@mloubser](https://forum.rasa.com/u/mloubser)\
**Post date:** [May 21, 2021, 2:39pm UTC](https://forum.rasa.com/t/calling-3rd-party-restricted-api-in-conversation-which-ask-for-authentication/43670/2 "2021-05-21T14:39:33Z")

</div>

Two ways:

1. Authentication as part of a custom action
2. Authentication handled from front end and passed on to rasa server