OAM Transient users

Hi,

I would like to configure my OAM environment with an IDP who has several million users. In my OAM environment I do NOT want to manage or store these users at all ( neither with auto-provisioning). I want to manage these as transient users/accounts. The IDP is providing me enough attributes which I can use to make authorization decision and to insert these as header values for my protected applications.

I can configure OAM in such way that it is mapping the nameID via an ldap filter to one user (ie. anonymousUser or transientUser). So fare so good.

But OAM sessions management "uses Maximum Number of Sessions per User" and I don't want to disable this because this is a global setting and for other authentications I still need this feature. When I map all my transient users from my IDP to this one OAM user I easily hit the max number of session for this user.