Amazon patents voice assistant login using a second device

1. A natural language processing system comprising: a processor; and non-transitory computer-readable memory storing instructions that, when executed by the processor, are effective to cause: an authentication delegation service to: receive, from a first device, first input data comprising a first utterance, the first utterance is associated with a first request to access first enterprise data managed by a third-party (3P) enterprise service; a device posture assessment service to: determine, based on a first set of device compliance signals received from the first device, a first security status of the first device, the first security status to indicate that the first device complies with a set of predetermined conditional access policies; and a recognition component to: determine based on the first utterance, a first voice profile; determine, based on the first voice profile, a first account registered with the natural language processing system; determine, based on a first device identifier associated with the first account, a second device; the authentication delegation service to: send a first passkey-based authentication notification to the second device, wherein the first passkey-based authentication notification comprises a first passkey challenge object; receive, from the second device, a first passkey response, the first passkey response comprising a first passkey challenge signature associated with the first passkey challenge object, and the first passkey challenge signature to indicate an execution of a first authentication challenge by the second device; authenticate the first account based on the first passkey response by verifying the first passkey challenge signature based on a public cryptographic key associated with a passkey related to the second device; upon successful authentication of the first account based on the passkey, initiate a first delegated authentication session for the first device, the first device authorized to access the first enterprise data during the first delegated authentication session; generate a first application programming interface (API) call associated with the first utterance, the first API call configured to retrieve the first enterprise data associated with the first utterance from the 3P enterprise service, and the first API call comprising an authentication token associated with an enterprise service account; receive, based on an execution of the first API call, the first enterprise data from the 3P enterprise service; and store the first enterprise data in a storage device associated with the natural language processing system.