An example of this :
School with Onboarding portal SSID - student authenticates through portal and DPSK is generated for student SSID - Student SSID has "Dynamic VLANS" - the DPSK generated for a student in yr7 would be for a different clan than a student in yr8, yr9, yr10 etc
This way the network management would then allow routing / filtering based on the year group without needing a separate SSID for each group.
It also avoids the RADIUS complexities in a BYOD scenario - avoiding 802.1x certificate installation.