SAML Authentication for Virtual Users

I'm running Weblogic 9.2

I'm trying to use SAML authentication to accept a credential from another
application.  I've configured my asserting party to "Allow Virtual
Users".  My understanding is that this would allow a user specified in the
SAMLAssertion into the site even if the user didn't exist in the Weblogic user
store.  I am only able to get users that ARE in the weblogic user store to
authenticate successfully.  Are there additional steps required or settings to
take into account to get the "Virtual Users" functionality to work?


<SAMLAssertion: Found subject for name: 'myfakeuser'> 
<SAMLNameMapperImpl: mapNameInfo: returning name: myfakeuser> 
<SAMLNameMapperImpl: mapGroupInfo: returning groups: null> 
<SAMLIACallbackHandler: SAMLIACallbackHandler(true, myfakeuser, null)> 
<SAMLIACallbackHandler: callback[0]: NameCallback: setName(myfakeuser)> 
<SAMLIACallbackHandler: callback[0]: NameCallback: setName(myfakeuser)> 
<SAMLDestinationSiteHelper: doLogin: LoginException while asserting identity,
returning SC_FORBIDDEN: javax.security.auth.login.FailedLoginException:
[Security:090304]Authentication Failed: User myfakeuser
javax.security.auth.login.LoginException: [Security:090300]Identity Assertion
Failed: User myfakeuser does not exist>

--