---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security
Release :
- australia
ft:locale :
- de-DE
ft:publication_title :
- Australia Platform security
ft:clusterId :
- psec
bundleId :
- psec
workflow :
- Platform
---
# Explore authentication factors
# Explore authentication factors for AI voice agents {#ariaid-title1}
* Freigeben Version: Australia
*
* Aktualisiert 12. März 2026
*
*  2 Minuten Lesedauer
Authentication factors are the elements used for caller identification and authentication. In secure voice agent environments, the process begins with identifying the caller, followed by authenticating their identity before granting access. A robust security strategy combines multiple factors to confirm that only authorized users interact with AI voice agents.{#explore-authentication-factors__patch-rn-zp4-1}
When configuring an AI voice service to support natural, conversational exchanges, it's crucial to select authentication factors that reliably verify a user's identity. Caller access to specific voice agents is determined by the
authentication types and methods configured by the administrator.
In this context, two categories of authentication mechanisms are supported:
## Single-factor authentication {#explore-authentication-factors__section_kwv_sxw_mhc}
Single-factor authentication requires the user to confirm the identity through a single verification method. Within the ServiceNow AI Platform voice agent configuration, you can select from three supported authentication factors:
* Knowledge-based authentication (KBA)
* Soft PIN
* Time-based one-time Password (TOTP)
{#explore-authentication-factors__ul_zlx_xxw_mhc}
Each method offers a distinct approach to user verification, enabling for secure access tailored to the needs of the service.
## Multi-factor authentication {#explore-authentication-factors__section_ich_zxw_mhc}
Multi-factor authentication (MFA) requires users to verify their identity with two methods, such as a PIN and an authenticator app code. This approach enhances security and user confidence by making accounts and voice services harder
for attackers to compromise.
* Primary factor: Initial verification method (such as Soft PIN, TOTP).
* Secondary factor: An additional verification method that strengthens security (such as sending push notifications through Okta Verify).
Hinweis:
Multi-factor authentication is selected as the primary factor by default, you can change the default behavior by setting the glide.voice.authenticate.mfa_mandatory property to false.
{#explore-authentication-factors__ul_ngv_1yw_mhc}
## Overview of the supported authentication factors {#explore-authentication-factors__section_hrg_dyw_mhc}
[Time-based one-time password (TOTP) authentication](https://servicenow-prod.fluidtopics.net/CBL~SIU~pj3Nr0PtleMmlA "A time based one-time password (TOTP) is a secure authentication factor that verifies user identity by generating a unique, time-sensitive code.")
:
* TOTP is a temporary numeric code generated by apps like Okta Verify on the user's registered device.
* TOTP is recommended for users needing stronger protection, as codes are generated locally and are resistant to interception.
{#explore-authentication-factors__ul_ak3_fyw_mhc}
[Push notification - Okta Verify](https://servicenow-prod.fluidtopics.net/PIYkHsBGv3KNWavFU6dQ6w "The Okta Verify app push notification enables users to securely approve authentication requests directly on their enrolled mobile devices.")
:
* Users approve authentication requests via a push notification on their registered mobile device.
* The factor is fast, convenient, and offers high security as a second factor, but requires an internet connection and secure device management.
{#explore-authentication-factors__ul_bk3_fyw_mhc}
[SoftPIN authentication](https://servicenow-prod.fluidtopics.net/~Xs9pHM89CSdWpgvXKkDpw "Soft PIN is an authentication method that verifies a user's identity through a personal numeric PIN set up in advance, specifically designed to support AI Voice Agent authentication.")
:
* Soft PIN is a 6-digit personal numeric the user is enrolled.
* The factor is suitable for verifying returning users in low-risk, self-service scenarios. It's quick to use and device-independent but can be vulnerable to observation or reuse.
{#explore-authentication-factors__ul_yj3_fyw_mhc}
[SMS One-time passcode (OTP) authentication](https://servicenow-prod.fluidtopics.net/lo52CAOykWhHzIgmKMD_sQ "SMS one-time password (OTP) authentication is a method used to verify user identity by sending a temporary, numeric code to the user's registered mobile number. The user enters this code to complete authentication.")
:
* SMS OTP is a temporary numeric code sent to the user's registered mobile phone.
* SMS OTP is easy to deploy and familiar. However, it's susceptible to SIM-swapping and delivery issues and shouldn't be the only factor for critical operations.
{#explore-authentication-factors__ul_zj3_fyw_mhc}
[Knowledge-based authentication (Security Questions)](https://servicenow-prod.fluidtopics.net/P40ddBrW0Id~nKOLiPVk0A "Knowledge-based authentication (KBA) is an identification and authentication method that verifies callers by prompting them to answer preconfigured questions across conversational AI channels, such as AI voice agents. KBA also supports validation against external systems through custom scripts, enabling identification of callers whose data resides outside ServiceNow AI Platform.")
:
* Knowledge-based authentication (KBA) are pre-set security questions configured by the admin, such as "What are the last four digits of your SSN?"
* Mostly used for low-risk operations, KBA requires no additional device but isn't secure and shouldn't standalone for sensitive actions.
{#explore-authentication-factors__ul_xj3_fyw_mhc}
To learn more about voice service and how to create them, see [Create an AI voice assistant](https://www.servicenow.com/docs/access?context=create-an-ai-voice-service&version=australia&pubname=australia-intelligent-experiences&ft:locale=en-US).