Nostr has identity and auth baked in to the protocol, but don't limit yourself to thinking of it as yet another way to SSO into a website.

Consider how it can be used to seamlessly connect to a collection of overlapping wireguard networks that run trusted relays for example.

It isn't necessarily about private networks, it's about trusted networks. Implementing filters at the proper layer provides scale and flexibility that separates network operators and relay operators.