For those interested, Sacramento Municipal Utility District did a case study on extending identity to manage sensitive files a couple of years ago. Although the case study was published in 2018, it is still very relevant today so I thought I'd link it here. It's only two pages and easy to digest for those who are interested.