It's hit and miss. Many civilian side agencies have PIV (the civilian version of CAC) cards for login to laptop/desktops, but not mobile phones/tablets. A few a

It's hit and miss. Many civilian side agencies have PIV (the civilian version of CAC) cards for login to laptop/desktops, but not mobile phones/tablets. A few agencies have apps are PIV/CAC enabled or have any MFA, but usually one user/pass login. So you see situations where smartcards are used to login to a device, then a username/password to connect to webapps.