What are the best practices for managing multiple user authentications

What are the best practices for managing multiple user authentications, ensuring that all users have strong, secure logins but without burdening them with too many authentication steps?