IdentityServer4 - How to Implement Impersonation

Question

I have a requirement to allow our internal support users to personalize our customers.

I am currently using IdentityServer4, Implicit Flow, and OIDC Client.

Resources found so far.

• [Question] User Identity IdentityServer4 # 853

• Create access token with IdentityServer4 without password

Given that there are limited resources on the Internet, are there any suggestions on how I can / should implement impersonation using IdentityServer4?

Answer 1

Probably will not try to create an impersonation feature in the IdentityServer4 core libraries. You just need a small data structure to store your issued UserId and a service to verify this. This is the main function that you should develop.

Also think that you might need superuser functions that are still present, even if you impersonate yourself (e.g. un-impersonate).