Hi, i suppose you've to set cookies from response and keycloak automagically made the things for you. I resolved the problem to call impersonation API from our back-office panel applying the following modifications to keycloak.js file. After /processInit /function definition add the following lines of code: /** * Append methods to keycloak object */ adapter.impersonate = function(options) { var url = kc.createImpersonationUrl(options); var req = new XMLHttpRequest(); req.open('POST', url, true); req.setRequestHeader('Accept', 'application/json'); req.setRequestHeader('Authorization', 'bearer ' + kc.token); req.withCredentials = true; var promise = createPromise(); req.onreadystatechange = function () { if (req.readyState == 4) { if (req.status == 200) { promise.setSuccess(); } else { promise.setError(); } } } req.send(null); return promise.promise; }; kc.impersonate = function(options) { return adapter.impersonate(options); }; kc.createImpersonationUrl = function(user) { return getRealmUrl().replace('/auth/', '/auth/admin/') + '/users/' + user + '/impersonation'; }; Then define your impersonate method that calls keycloak.impersonate where you manage local session refresh, like that: function impersonate(user) { var deferred = $.Deferred(); keycloak.impersonate(user).success(function() { console.log('user ' + user + ' impersonated'); // clear local session user informations clearSession(); // refresh logged user keycloak.login(); deferred.resolve(); }); return deferred.promise(); } Hope this helps! ;) Daniele Bonetto Il 12/05/2016 00:29, Anshul Malpani ha scritto: