A retail company runs a self-registered guest portal on ISE. Management complains that a single guest account username and password is being shared among many customers, allowing far more devices online than intended. The security team wants each guest account to be usable on no more than two devices at the same time, while still allowing legitimate guests to register normally. Which ISE guest portal configuration should the administrator adjust to enforce this?