The PCI Council has published an “Information Supplement” on multi-factor authentication (pdf). The document that multi-step and mutl-factor authentication are not the same and that the former is not acceptable.
PCI DSS requires that all factors in …