Impersonation Feature

[Skyppid]

We're currently migrating from Keycloak to Authgear and this feature was available in Keycloak for a long time already. We have many flows that are visually and behaviourly very different depending on whether users are internal or external to our company. For us developers it's an essential tool to be able to impersonate users so we can see and verify issues that might occur for our external users. With Authgear this is currently impossible and makes testing in production a lot harder for bugs that slipped through testing.

Solution

When selecting a user in the portal, an action button should allow for impersonation. By that the current session (if logged in) should be revoked and a new session as that user should be started.

Being able to do this via code (i.e. using the Angular client in an app making it possible to invoke this action via code and re-login as the provided user) would be a nice addition but no necessity as long as it is possible via Portal.

As you can see here it's also programmatically possible to invoke that action on Keycloak: https://medium.com/@zainabghauri7799/user-impersonation-using-keycloak-why-it-matters-and-how-to-implement-it-fd305d0b7150

[chpapa]

Thanks for the feedback @Skyppid -- we would definitely look into it and include it on our roadmap.