The best solution to security is a layered one; likewise to authentication. So, even where other means of authentication are employed, ID/password authentication is often retained.
Nevertheless, what is holding up corporate use of other forms of authentication is still cost. When you have 100,000 employees to outfit, setup, and monitor with finger print authentication or whatever, the outfit price or price per unit alone is prohibitive. Then, factor in the addtional recurring cost of labor for setup and monitoring and these other forms of authentication look very expensive. Only in certain government (the NSC, for example) and industry (banking - the Fedline, for example) units does the need for better authentication override cost at this time.
Having said the above, the time is near when using an 8+ mix of alpha numerics and symbols in a password can be broken in a relatively short period of time. This may necessitate other forms of authentication regardless of cost in many more areas.
|