SecurityServerClient.addPrincipal() allows adding more principals than the installation's license allows.

Using the SecurityServerClient addPrincipal() method when integrating with our application lets us add more principals into Crowd than the Crowd installation's license allows. Once we reach that limit no users can log in to Crowd for SSO, nor can the Crowd admin user log in to delete some of them.

Ideally addPrincipal() should throw some sort of exception we can catch and prevent adding above and beyond the limit.