maybeIdentityConstraint