According to one embodiment, an authentication tool includes a memory, an interface, and a processor. The memory stores a workflow to authenticate a user to access an application. The workflow includes a first control frame for a first authentication type and a second control frame for a second authentication type. The authentication types are different and include one of a device identification, a biometric identification, a personal identification number (PIN) identification, and a security question identification. The interface receives a request to access the application and receives a first input and a second input. The processor determines a first numerical score in response to the first input and a second numerical score in response to the second input. The processor allows the user to access the application upon a determination that the scores exceed a predetermined threshold.