My colleague, Microsoft Architect Evangelist, David Chou, recently authored a very well-written explanation of this topic for the The Architecture Journal

In particular I like his visual summary of authentication considerations.

 

Strong User Authentication on the Web