Real Application Security with centrally-managed users

I'm working on a problem involving two somewhat obscure -- but vitally important -- pieces of functionality in Oracle19c...

• Real Application Security (RAS)
• Centrally-managed users (CMU)

In general, RAS is the successor to virtual private databases (VPDs), which was introduced way back in Oracle8i for fine-grained row-level security and column-level security.  CMU is the management of database users by a centralized external authority such as Microsoft Active Directory, rather than an Oracle DBA using CREATE USER commands in each Oracle database.

There is copious documentation and support for either mechanism, but I am hard-pressed to find anything indicates that both can be used together.

We've already started down the road of devising a custom solution for integrating the two, but it is hitting difficulties, so I would like to find out if anyone on this list has any experience -- or knows of someone who has experience -- using both RAS and CMU together?

If anyone from the security or identity-management product groups at Oracle could offer any advice, it would be gratefully accepted!

Please let me know what you think?