...
- Are password-based authentication good enough for you?
- Should passwords have some kind of quality floor? (What kind of quality floor?)
- Do you need two factor authentication? (What kind of?) Are you willing to share its costs?
3.4.Step-up authentication as a service
...