ad_set_client_property writes to the sec_session_properties table, mapped against someones session_id, which I think in your case is perfect.