Most of the sites I’ve seen use it as the single auth source. That said, using multiple forms of authentication in a layered model only improves security.