Many still believe that intelligent authentication systems alone are sufficient to both enhance the daily experience of your users, and protect your business against threats. This Discussion Paper explains why such confidence is misplaced. Without a robust policy and a strong framework to support your authentication systems, users will only create more risk, threatening your entire enterprise security with potentially disastrous consequences.