Is authentication based on something a person is?

Not always. Authentication is based upon one or more of the following:

1. Something the user knows (such as a PIN).
2. Something the user has (such as an ID card).
3. Something the user is (such as a fingerprint).