AI Bots Are in Your Carrier Portal. Here's the Fix.

AI vendors are sending bots into carrier portals right now — using the same shared login credentials your team has always used to sign in. The carriers are the ones on the hook for whatever those bots touch, and it's already showing up as regulatory risk: New York alone has fined insurers millions of dollars over cybersecurity failures under its Part 500 rules. In this episode of AI for the IA, Michael sits down with Alvito Vaz, Executive Director of ID Federation and a 30-plus-year veteran of insurance technology, to unpack how the industry got here and what actually fixes it. Alvito's point is blunt: this isn't a new problem, it's an old one wearing a new face. Agencies have shared credentials with colleagues for years. Now those same credentials are being handed to a hundred bots at once — and carriers have no reliable way to tell a bot from a person, or a controlled bot from an unsupervised one. ID Federation's answer is SignOn Once, a standards-based trust framework that lets an agent authenticate once into their agency management system and pass a secure token on to carrier partners — no repeat logins, no repeat MFA prompts. It's already live with two of the industry's major AMS partners, Vertafore and Applied Systems. The piece still missing is carrier adoption — the third leg of what Alvito calls the channel's three-legged stool: carriers, agents, and technology providers. That's the ask of this episode: agents can go to idfederation.org and use the "Engage Your Carriers" action to push their own carrier partners toward adoption. It's a five-minute step that moves a real industry-wide fix forward.