How to use an Microsoft Entra ID to authenticate with the Speech to text REST API (for batch transcription

Question

I looks like you can only authenticate to the "Speech to text REST API" with a api key (Ocp-Apim-Subscription-Key). What we would like is to authenticate with a Microsoft Entra ID.

Why? Our application is running a AKS and all our containers have a specific managed identity to communicate with all different kind of Azure Services. Currently we only need to configure an API key to communicate with the "Speech to text REST API". We want to replace this also, with a managed identity.

Answer 1

@Johan Klijn Welcome to Microsoft Q&A Forum, Thank you for posting your query here!

To configure and use Microsoft Entra authentication with the Speech SDK follow this article: https://learn.microsoft.com/en-us/azure/ai-services/speech-service/how-to-configure-azure-ad-auth?tabs=portal&pivots=programming-language-csharp

The Batch Transcription REST API does talk about using the (Entra ID) access token instead of Ocp-Apim-Subscription-Key.

https://learn.microsoft.com/en-us/rest/api/speechtotext/transcriptions/create?view=rest-speechtotext-v3.2-preview.2&tabs=HTTP

Also note that, you can manage access and permissions to your Speech resources with Azure role-based access control (Azure RBAC). Assigned roles can vary across Speech resources.

Refer this article for the Role-based access control for Speech resources:

https://learn.microsoft.com/en-us/azure/ai-services/speech-service/role-based-access-control#speech-studio-authentication

To enable system assigned managed identity for the Speech resource that you use for batch transcription and locate files in Azure Storage, follow the steps mentioned here:

https://learn.microsoft.com/en-us/azure/ai-services/speech-service/batch-transcription-audio-data?tabs=portal#enable-system-assigned-managed-identity-for-the-speech-resource

Hope this helps. If you have any follow-up questions, please let me know. I would be happy to help.