At Microsoft I can use [Azure Authenticator](https://itunes.apple.com/us/app/azure-authenticator/id983156...) as a second factor to my password for company resources. It's got touch ID support, so frankly I find the added security super pain-free.

Full disclosure: I work at Microsoft, but not on Azure Auth.