There's no auth gate in BP cloud yet, so you would have to embed your bot in a webpage that is only available after authentication. Everything else sounds pretty doable though