A-ha, I just figured it out! You can toss the parameter variables into the source filter in the session, not in the mapping! Apparently the variables' values get tossed in at the session level before going into the mapping and actually executing any SQL that it needs to do. In cases where the variables are strings, simply surround them with single quotes (it won't interpret them as a static $$variable name, the actual value will be substituted in).