Identity and access seem much clearer to me. Not every identity determination is via log in, not every access check is purely based on permission. I will try an

Identity and access seem much clearer to me. Not every identity determination is via log in, not every access check is purely based on permission. I will try and use identity/access/IAM instead of authn/authz/auth.