That is a nice little summary of what it entails. Great. Perhaps also worth mentioning protocols related to authentication and authorization, such as OpenID Connect (federated authentication), OAuth (authorize clients to act on your behalf), and SCIM (for provisioning users and authorizations).