Yes. You're correct. Each steps can be split in minor tasks as well, but you describe the overall algorithm.
Follow a couple of articles describing in details the login process. [1] [2]
Note that this is only about the plain password, not mentioning PAM system. [3]