Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
[This article is prerelease documentation and is subject to change.]
Important
You're responsible for configuring and using this Biometric authentication and enrollment functionality in compliance with applicable law, including but not limited to biometric and privacy laws (for example, BIPA and the GDPR), including: (i) providing notice to data subjects, including with respect to retention periods and destruction; (ii) obtaining legally sufficient consent from data subjects; and (iii) processing and deleting the biometric data and biometric identifiers. Biometric data and biometric identifiers will have the meanings set forth in applicable biometric and privacy laws and include equivalent terms set forth in any applicable law. You will defend and indemnify Microsoft against any claims made by a third party related to this biometric functionality, including but not limited to the adequacy of consent.
Biometric authentication lets you choose a range of security-versus-convenience trade-offs and select the configuration that fits your use case and your organization's risk posture. You save a combination of biometric authentication settings to an authentication policy, and then apply that policy to the voice channel or voice agent of your choice.
The default authentication policy is fully functional, so you can start without changing anything. Use this article when you want to tune enrollment and authentication behavior. It's intended for administrators who manage voice authentication for Contact Center Intelligence.
You can configure one authentication policy only.
Important
- This is a preview feature.
- Preview features aren’t meant for production use and might have restricted functionality. These features are subject to supplemental terms of use, and are available before an official release so that customers can get early access and provide feedback.
Speech requirements for enrollment and authentication
The Low, Medium, and High speech requirements setting controls how much customer speech biometric authentication needs to create a voiceprint and to authenticate against it.
- Longer enrollment speech settings improve authentication accuracy.
- Shorter enrollment speech settings can improve adoption because voiceprint creation requires less customer effort.
- Longer authentication speech settings improve authentication, playback-detection, and synthetic-speech-detection performance.
Biometric authentication uses the authentication settings saved in the policy at the time of the authentication attempt. Because of this, an enrolled voiceprint can always attempt authentication, even if you change the policy's speech requirements after the customer enrolls.
For example:
- A voiceprint is created using the Low setting.
- The policy is later updated to the High setting.
- A later authentication attempt uses the current authentication speech requirement against the existing voiceprint.
Sensitivity and threshold settings
The Lenient, Moderate, Strict, and Custom settings let you independently configure the voice-authentication, playback-detection, and synthetic-speech-detection thresholds on a scale of 1 to 1000.
For enrollment, set the thresholds that a voiceprint must meet to be created:
- Playback detection – the likelihood that the audio contains signs of a loudspeaker. A higher threshold lowers the chance that recorded audio is used to create a voiceprint, and raises the chance that a legitimate customer's enrollment fails.
- Synthetic-speech detection – the likelihood that the audio contains non-natural speech. A higher threshold lowers the chance that synthetic audio is used to create a voiceprint, and raises the chance that a legitimate customer's enrollment fails.
For authentication, set the thresholds that an attempt must meet to pass:
- Voice authentication – how closely the caller's voice must match the stored voiceprint. A higher threshold lowers the chance of a false accept and raises the chance of a false reject.
- Playback detection – a higher threshold lowers the chance of a false accept and raises the chance of a false reject.
- Synthetic-speech detection – a higher threshold lowers the chance of a false accept and raises the chance of a false reject.
Voiceprint locking
Voiceprint locking helps protect voiceprints from brute-force attacks. After consecutive authentication failures against the same voiceprint, biometric authentication automatically locks it, which stops an imposter from continuing to attempt authentication.
Automatic unlock period
You can configure the number of hours before a locked voiceprint automatically unlocks. An automatic unlock period deters a brute-force attack without adding the operational burden of manually reviewing and unlocking voiceprints.