...card or token), something the user knows (a password or PIN), and something that only the user can present (a biometricID such as from a fingerprint or retina scan). Any good single sign-on implementation should have the flexibility...
http://www.novell.com/products/securelogin/single_signon.pdf