The failure of corporate security strategies to protect personal identity information from hackers resides more with system architecture than with authentication technology. Here’s why.
For too long, enterprises have been looking for the perfect two-factor authentication. First, it was X.509, then hard tokens, then SMS, and now Push and biometrics. And still, hackers keep winning. Just look at what happened with Target, Neiman Marcus, Living Social, Snapchat, and others.

The problem isn’t the two-factor authentication technology. To be more specific, it’s not just the two-factor authentication. It’s the full integration, which includes the storage, accessing, validation, and assertion of identity throughout the authentication process.

Read more at Information Week – The Problem With Two-Factor Authentication