[j0057]

I usually understand "Identity" in the context of authentication and authorization to mean "who is the person or process trying to access the service", what do you think is inappropriate about this use of the word? Or another way to put it, from what should it be disambiguated?

[slx26]

A user account, an email or a phone number do not uniquely identify a person or process, and it doesn't tell you whether it's actually a person or a process.

Edit: "account" may not fully capture everything ory might be trying to do, but it's definitely closer than "identity".