The power also lies in it's ability to be used as an external userstore that can be called via API's from your own app as well as oidc/integrated mfa support