Yes, I've seen it used both as primary factor and as a second authentication factor (I'm not sure you would ever need it as 2FA, but whatever). Requires some setup, though.