Yes that is correct. Mambo authentication is user level only
I wrote the integration and I can tell you the only drawback to Mambo seems to be too many hands in the cookie jar. Every stylesheet/template set has there own class calls which make it near impossible to map stylesheet colors.
I was able to map things to one stylesheet quite sucessfully when doing my tests but thats not good enough to support stylesheet integration or claim it
