The docs tell me to contact support, is this how I contact them?
Unfortunately this feature, Impersonation API, has since been deprecated and cannot be enabled. I went ahead and contacted the appropriate teams to update our documentation to reflect the correct information. I am terribly sorry that it provided inaccurate information! We will make sure to update this ASAP.
Can you explain why this was deprecated and what the alternative would be?
@abooth We’ve stopped supporting the impersonation feature for the foreseeable future due to a number of security concerns. Impersonation leaves your application vulnerable to CSRF attacks, since the flag allows the bypassing of the CSRF check from the state parameter if this parameter is missing from the authorization response. I will need to investigate if there is an alternative at this time.
we have similar requirements for our system. Is there any alternative that can be considered?
@trial.auth01 unfortunately I am not aware of any plans for impersonation at this term for a short term solution.
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.