Palm prints were used at a nuclear facility I visited as an alternative to fingerprints in step 2. After you scan your id card you scan your palm print and the system verifies the palm matches the one that is registered with the card. They are not as unique as finger prints but it makes it much more difficult to use someone else's card (or username).

If you use fingerprint to confirm username, you have to have an alternate means to do that, because fingerprints can be destroyed.