Identity and access management decides who gets in, what they can touch once inside, and how you prove later that the decision was right. Here is the whole picture in one page: the vocabulary, the standards, the parts that break, and where access is actually decided.