Advanced shell in v11.4?

OK, then the only way you can make this work is to create local accounts with the same name as the remotely authenticated accounts but no password and configured with Advanced Shell access. The blank password isn't a risk as if the remote authentication fails only the admin or root accounts can login (I think, but worth testing).