Digital Customer Service - Separate Identity Domain/Provider for External Users

Summary:

We are half-way through implementing a Digital Customer Service application whereby the requirement is for external to log into the site to view Knowledge Articles and Products (and potentially raise service requests and chat as part of future scope). Users are authorized to view Fusion Apps content via a proxy user setup as per Oracle documentation.
In a nutshell, users can request access to application via self-registration form, the access is then approved/rejected via Registration Requests. When approved, the user is created in our standard "free" SaaS Fusion Apps Identity Provider (idcs) in OCI, and a role is assigned to their user in that identity provider that corresponds to the proxy user in order to provide required access to fusion content.