1. A computer-implemented method to authenticate a user through a triple factor authentication in one step, the method comprising: intercepting, by a gateway, an access request sent to a network address of a resource server from a user using a user device the access request comprising a unique user record identifier; identifying a specific user device used by the user to send the access request based on a cookie or an identifier stored in the specific user device by the gateway; selecting a voice biometrics record of the user recorded using the specific user device used by the user to send the access request from among a plurality of voice biometrics records stored for the user during an enrollment period; placing a call to the user device based on information from the cookie or the identifier; sending, to the user device, a challenge message prompting the user to respond by voice, wherein the challenge message corresponds to the selected voice biometrics record; receiving, from the user device, a voice sample of the user; comparing the voice sample of the user against the selected voice biometrics record; converting the voice sample into a speech-to-text phrase; and comparing the speech-to-text phrase against a stored secret text phrase to verify the speech-to-text phrase matches the stored secret text phrase.
10. The computer-implemented method of claim 1 , wherein intercepting the access request to the resource server from a user using a user device providing a unique user record identifier comprises the unique user record identifier being provided by an authentication, authorization and accounting (AAA) protocol.