One of the largest issues to impact the ability of companies to provide sufficient authentication programs is the fact that even if a person uses the correct credentials to gain access through a user authentication system, if the program only uses a username and a password, the actual identity of the user cannot be confirmed. Only the credentials themselves are correctly confirmed. This means that there is some significant pressure on companies who are trying to make sure that their efforts at creating highly secure environments go beyond the basic authentication of user inputted credentials.