CHATBOTS

MFA Re-Enrollment Self-Service Bot

A webhook-triggered IT bot that helps employees who lost their MFA device re-enroll: it verifies identity, revokes the old factor, and issues a fresh enrollment link in Teams.

CategoryChatbots
Enginesim
Difficultyadvanced
Triggerwebhook
Steps6
Setup~25 min

How it runs

The automated pipeline, trigger to output.

  • TriggerWebhook fires on device-change / MFA reset requestHTTP webhook
  • ActionVerify employee against directoryAirtableAirtable
  • LogicGate: active employee with verified contact
  • ActionRevoke stale MFA factor via identity APIHTTP webhook
  • ActionRequest fresh expiring enrollment linkHTTP webhook
  • OutputDeliver enrollment link in TeamsMicrosoft Teams

What it does

When an employee reports a lost or replaced phone, this bot handles MFA re-enrollment end to end. It is kicked off by a webhook (from a self-service portal form or HR device-change event), verifies the employee against the directory, revokes the stale MFA factor through the identity API, and delivers a time-boxed re-enrollment link in Teams.

When to use it

Use this when lost-device MFA resets are a recurring, high-friction ticket and you want a verified, automated path that revokes the old factor safely before issuing a new one.

How it works

  1. 1A webhook fires from the portal or HR system when an employee flags a device change.
  2. 2The bot matches the employee record in the directory to confirm identity and status.
  3. 3Logic gate: proceed only for active employees with a matching verified contact.
  4. 4It calls the identity provider to revoke the existing MFA factor.
  5. 5It requests a fresh, expiring enrollment link from the same provider.
  6. 6The bot delivers the enrollment link and instructions to the employee in Teams.

Set it up

What you configure once, before turning it on.

  1. 1
    Connect HTTP webhookTrigger any URL on agent actions.
  2. 2
    Connect AirtableBases, tables, views, automations.
  3. 3
    Connect Microsoft TeamsChannels, chats, files.
  4. 4
    Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
  5. 5
    Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
  6. 6
    Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.

Run this workflow in your colony.

14-day trial. No DevOps. No Sales call. Provisioned in under a minute.