Between usability goals and security/regulatory pressures, setting up customer-facing security is difficult. These steps and best practices can help.