At Microsoft I can use [Azure Authenticator](https://itunes.apple.com/us/app/azure-authenticator/id983156...) as a second factor to my password for company resources. It's got touch ID support, so frankly I find the added security super pain-free.

Full disclosure: I work at Microsoft, but not on Azure Auth.

Fingerprints are moderately easy to forge, and you can't issue new ones once they are compromised.

These things have been around forever, no need for all that complexity:

http://www.amazon.com/Digital-Persona-U-are-U-4500-Fingerpri...