The impersonation feature we have logs the admin in as the impersonated
user rather than generate tokens. We decided on this approach as it would
be transparent to applications and they wouldn't need to build-in special
impersonation. What you want is not possible at the moment, but you can
create a JIRA feature request for it. It would have to be a community
contribution if you want it added in a timely manner.
On 4 July 2016 at 18:52, Harry Trinta <harrytpc(a)gmail.com> wrote:
I need a help with user impersonation on keycloak.
I am authenticating users through the
"/realms/test/protocol/openid-connect/token". As expected, it returns a
In my app, all requests go through apiman, which validates the JWT.
Now, I need to personification of user. I'm calling the service
"/admin/realms/test/users/USER_ID/impersonation", sending the token in the
header (Authorization = Bearer eyJhbGciOiJSUzI1NiJ9 ...).
The service /impersonation creates the user session on keycloak, however
doesnt return a JWT, but 3 cookies. *I'd like to get the JWT of
personified user instead of cookie.* It's possible?
keycloak-user mailing list