I forwarded your question on to the OpenSSO architect.
I believe there was a SAM created to achieve the effect
you are looking for, but it would be best to learn the details
from the OpenSSO team.
[Message sent by forum member 'monzillo']
http://forums.java.net/jive/thread.jspa?messageID=393144