An authentication method that requires users to provide two forms of identification before accessing a system.