When you map a user in Enterprise User Security (EUS) - I found that you can indeed avoid mapping the user in Enterprise Security Manager (ESM) if you provide the complete syntax when creating/altering the user.
So for example:
alter user hr identified globally as 'cn=Mark Wilcox,cn=Users,dc=ovddemo,dc=com';
Should allow you to then login as Mark Wilcox using his uid value (e.g. mwilcox).
I'm sure I read that in Knox's book before but it didn't sink in until I was asked about this at OOW last week.
