Microsoft has announced the general availability of Face Check with Microsoft Entra Verified ID, a new security feature designed to enhance identity verification through facial recognition technology. Initially introduced in preview mode in February 2024, this tool is now available as a standalone product and as part of the Microsoft Entra Suite. The announcement was made through a post on Microsoft’s Tech Community by Ankur Patel, who leads Growth for Identity Security at the company.
Face Check utilises real-time facial recognition to compare a user’s selfie with a photo from a trusted source, such as a passport or driving licence, ensuring the authenticity of the identity being confirmed. As the first premium capability within the Microsoft Entra Verified ID framework, it facilitates the validation of a wide range of credentials using open standards. The system operates in conjunction with various verification partners across 192 countries. Microsoft Entra Verified ID, also based on open standards, enables organisations to authenticate a variety of identity attributes, including driving licences and liveness matches.
Face Check rolled out for enterprise users
The functionality of Face Check extends beyond basic validation. Applications can make simple API requests for users to perform a Face Check against various credentials, including state-issued IDs or custom digital credentials with trusted photos. This capability is valuable for businesses implementing self-service scenarios such as passkey activations or password resets. Help desk services can also employ Face Check to quickly and securely confirm identities, receiving a confidence score for the match without accessing liveness data.
Microsoft has highlighted the increasing complexities of digital fraud and the emergence of sophisticated impersonation tactics such as deepfakes. These developments underscore the necessity for robust identity verification systems to combat impersonators who exploit weak credentials to gain unauthorised access, potentially compromising sensitive information.
The Microsoft Entra Suite integrates elements such as network access, identity protection, governance, and verification to deliver zero-trust access solutions. The broader application of the suite aims to ensure that employees can securely access applications both in the cloud and on-premises, enforcing least privilege access across various networks. This implementation, Microsoft claims, strengthens the corporate perimeter against potential threats, aligning with the broader industry focus on enhancing security measures in response to evolving digital risks.
Facial recognition controversies continue to smoulder
Aside from Microsoft, several other companies are heavily involved in developing facial recognition technology. Clearview AI is one of the most controversial, known for building its facial recognition database by scraping billions of images from social media without user consent.
Amazon has also been at the forefront, with its Rekognition software being sold to law enforcement agencies, which has sparked significant debate over privacy concerns. IBM, once a pioneer in facial recognition, decided to halt development in 2020 due to ethical considerations and the potential for misuse of the technology.
The controversy surrounding facial recognition technology stems from concerns over privacy, civil liberties, and the potential for misuse by both governments and corporations.
Critics argue that this technology could lead to mass surveillance, racial bias, and wrongful arrests, particularly in countries with fewer regulations or authoritarian regimes. Additionally, there are fears that facial recognition could be used to suppress dissent and monitor protestors, raising ethical concerns about its deployment.