The value we provide, when you are using our cloud, is the operational peace of mind, global scalability with data residency and access to deep technological knowledge.
We wrote some word about that in our blog [3] as well.
1. https://zitadel.ch/blog/openid-connect-certification
What do you mean by these?
Are you talking about SOC2/ISO27001 when you say certification?
Are you talking about provisioning/deprovisioning users (SCIM, etc) when you say lifecycle management?
What do you mean by approvals? Role changes requiring designated approval, or something else?
Onboarding - birthright provisioning of accounts across many systems. Email, directory, etc.
Termination - automatically remove application level access across the business, not just the user's sso access.
Approval - the ability to request access to a system, have it go through a series approvals (which are audited) and then if approved, provision the correct level of access in the end system.
Certification - the ability to do periodic access reviews of users. This is typically run yearly or quarterly and you would be asking the user's manager and possibly the application owner to review their access and decide if it is appropriate. If the choice is made to revoke it the IAM system should go directly to the application and remove their access.
Yes SCIM covers some of this, but it is just a protocol.