I won't delve too deeply into the subject, but note that portlets can use information they find in the credential vault to automatically log in.
Though we cover some of the Sametime bot API, we do not delve too deeply into the intricacies of bot programming.