Multi-factor authentication (MFA) is a tried and true technology that rarely incites debate. How then did MFA became a hotly debated topic at the PCI Standards Council North American Community Meeting? The answer is a classic clash of theory and reality.