>> Based on the location of this setting, I'm assuming that the answer to the second half of my question is no.
Nothing is impossible with Gluu Server. I guess you can modify ldap entry manually or develop some oxTrust feature which can does that for specific client.