An endeavor to overlay the system with an identity framework must first decide what an Identity is, determine it, and only then use existing controls to decide what is intended with this new information.
To implement an identity framework on a system, you must first define what constitutes an "identity," then identify it, and only after that can you utilize existing control mechanisms to decide how to use this newly acquired information.