I don't think there is an upper limit as such. The number of username/password entries depends on the maximum configuration file size limit. You can keep adding usernames till your configuration file exceeds this size. However, from a performance point of view, it is recommended that for anything more than a few users, you should opt for an external database.
