> Just register these things in the IDP and let them sign into their own accounts.
replyAnd when you get blocked by whatever anti-bot tech the site is running?
Not sure I understand the point your are making. how is this unique for bots with their own identity? Bots hijacking a user session can also be blocked
replyBots skinwalking their users inherit the behavioral scoring of that user. As a rule, they'll take a lot longer to get blocked than new bot accounts would.
replyBut then whoever added them to the IDP becomes accountable for what the bots do.
replyBy hijacking a real person's credentials, that person becomes the accountability sink. Very neat. Very deliberate.