Usually through service accounts. Those are single factor.