There're multiple layers, I don't wanna give too much details lol. But basically things like, assigned computer, office network, phone or physical multifactor keys, etc.

I'm ok with everything except the generated password because it's a hassle.