Of course, if your database accepts only network domain logins, then all this fancy authentication would be handled by Active Directory, not by SQL Server. Users login to the network using rotating passwords, dongles, etc.
However, SQL Server can also do additional things like verify machine or IP address using login triggers.
"Do not seek to follow in the footsteps of the wise. Instead, seek what they sought." - Matsuo Basho