# Does anyone else use impersonation and has security breaches?

**URL:** <https://community.auth0.com/t/does-anyone-else-use-impersonation-and-has-security-breaches/7151>\
**Category:** Get Help\
**Tags:** impersonation\
**Created:** [June 20, 2017, 12:28pm UTC](https://community.auth0.com/t/does-anyone-else-use-impersonation-and-has-security-breaches/7151 "2017-06-20T12:28:53Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mark\_Redman](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/mark_redman/32/6240_2.png) [@Mark\_Redman](https://community.auth0.com/u/Mark_Redman)\
**Post date:** [June 20, 2017, 12:28pm UTC](https://community.auth0.com/t/does-anyone-else-use-impersonation-and-has-security-breaches/7151/1 "2017-06-20T12:28:53Z")

</div>

I am wondering how people use impersonation and if they have had any issues?

from technical support:

> “Note, that we do not recommend using  
> the impersonation feature as it may  
> introduce security vulnerabilities  
> into your application. We are working  
> on a new impersonation implementation,  
> however don’t yet have an ETA for  
> this.”

Can anyone elaborate on why this may introduce vulnerabilities, would it be the implementation by Auth0 or the would this be open to vulnerabilities by not implementing this correctly when integrating with the Auth0 API?

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [March 2, 2018, 5:54am UTC](https://community.auth0.com/t/does-anyone-else-use-impersonation-and-has-security-breaches/7151/2 "2018-03-02T05:54:47Z")

</div>