According to Strong Customer Authentication requirements, customer identities must be affirmed according to at least two of the following three factors: knowledge, possession, or inherence.