Ok, I ditched the "impersonation" client and now impersonate is done
through the admin console. There is a "Impersonate" button in the
user-list screen next to each user, then there is an Impersonate button
on the user detail page.
If the user is in the same realm as the admin, the admin is logged out
and the browser is redirected to Account.applications page.
If the user is not in the same realm as the admin, a new browser tab is
popped open and displays the Account.applications page.
I still need to do admin events for this, then I'm done.
JBoss, a division of Red Hat