# \#impersonation

**URL:** https://community.auth0.com/tag/impersonation/129.md

[Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md)

---

## [Recommended alternatives to impersonation](https://community.auth0.com/t/recommended-alternatives-to-impersonation/101118)

<div class="topic-metadata">

**Author:** [@conrad.scherb](https://community.auth0.com/u/conrad.scherb)\
**Replies:** 1\
**Last updated:** [February 23, 2023, 9:42am UTC](https://community.auth0.com/t/recommended-alternatives-to-impersonation/101118 "2023-02-23T09:42:03Z")

</div>

I’m wondering what the Auth0 recommended approach is to avoid impersonation as it’s been long deprecated. Our use case is to allow our support staff to make changes to customer facing features in our application as if th…

---

## [How to Modify Access Token with acts\_as claim to imitate user impersonation](https://community.auth0.com/t/how-to-modify-access-token-with-acts-as-claim-to-imitate-user-impersonation/83203)

<div class="topic-metadata">

**Author:** [@dominic1](https://community.auth0.com/u/dominic1)\
**Replies:** 5\
**Last updated:** [May 12, 2022, 2:03pm UTC](https://community.auth0.com/t/how-to-modify-access-token-with-acts-as-claim-to-imitate-user-impersonation/83203 "2022-05-12T14:03:38Z")

</div>

Understanding that true user impersonation isn’t possible, my proposed solution to mimic impersonation by adding a claim to the JWT so that my JWT still has my user’s sub but it also has metadata that the app can referen…

---

## [Resume previous session after impersonation](https://community.auth0.com/t/resume-previous-session-after-impersonation/76800)

<div class="topic-metadata">

**Author:** [@alexandru](https://community.auth0.com/u/alexandru)\
**Replies:** 1\
**Last updated:** [January 21, 2022, 6:14pm UTC](https://community.auth0.com/t/resume-previous-session-after-impersonation/76800 "2022-01-21T18:14:26Z")

</div>

After impersonating a user, is there a way to tell that the current session is an impersonation and allow to go back to the previous session, without asking the user to logout and login again? I’m using @auth0/auth0-ang…

---

## [Impersonation with custom domain](https://community.auth0.com/t/impersonation-with-custom-domain/43287)

<div class="topic-metadata">

**Author:** [@gshaw](https://community.auth0.com/u/gshaw)\
**Replies:** 1\
**Last updated:** [May 20, 2020, 3:04am UTC](https://community.auth0.com/t/impersonation-with-custom-domain/43287 "2020-05-20T03:04:51Z")

</div>

We’ve recently switched to using a custom domain to fix issues with users that are blocking 3rd party cookies and we’re finding that this has broken our use of the impersonation API. When using impersonation through the…

---

## [Laravel User Impersonation](https://community.auth0.com/t/laravel-user-impersonation/36171)

<div class="topic-metadata">

**Author:** [@stanley](https://community.auth0.com/u/stanley)\
**Replies:** 5\
**Last updated:** [January 15, 2020, 9:13pm UTC](https://community.auth0.com/t/laravel-user-impersonation/36171 "2020-01-15T21:13:55Z")

</div>

Hi, Laravel allows you to easily impersonate users using Auth::login($user). Since we implemented Auth0 for our users to login, we are no longer able to do this. After performing an Auth::login($user) and redirecting to…

---

## [Sign in as a customer user](https://community.auth0.com/t/sign-in-as-a-customer-user/22608)

<div class="topic-metadata">

**Author:** [@scot.sessions](https://community.auth0.com/u/scot.sessions)\
**Replies:** 0\
**Last updated:** [March 13, 2019, 9:43pm UTC](https://community.auth0.com/t/sign-in-as-a-customer-user/22608 "2019-03-13T21:43:50Z")

</div>

I use a feature called “Sign in as” daily. It used to sit to the left of Actions on a user account. Where did it go? Did it get moved to another location. Without it I am unable to log in as a client user and provide the…

---

## ["Sign In As" button is missing from the manage.auth0.com interface](https://community.auth0.com/t/sign-in-as-button-is-missing-from-the-manage-auth0-com-interface/22597)

<div class="topic-metadata">

**Author:** [@joe6](https://community.auth0.com/u/joe6)\
**Replies:** 0\
**Last updated:** [March 13, 2019, 6:07pm UTC](https://community.auth0.com/t/sign-in-as-button-is-missing-from-the-manage-auth0-com-interface/22597 "2019-03-13T18:07:54Z")

</div>

Normally when using the Auth0 UI and viewing an individual user, there’s a “Sign In As” option next to “Actions” that lets you impersonate a user. I’m not seeing that option anymore, was it removed? My them often uses it…

---

## [Impersonation](https://community.auth0.com/t/impersonation/7652)

<div class="topic-metadata">

**Author:** [@joe1](https://community.auth0.com/u/joe1)\
**Replies:** 4\
**Last updated:** [October 24, 2017, 2:38pm UTC](https://community.auth0.com/t/impersonation/7652 "2017-10-24T14:38:59Z")

</div>

Hi, Can i have impersonation enabled on my account? Thanks

---

## [Enabling impersonation for an additional administrator](https://community.auth0.com/t/enabling-impersonation-for-an-additional-administrator/8497)

<div class="topic-metadata">

**Author:** [@instntchris](https://community.auth0.com/u/instntchris)\
**Replies:** 3\
**Last updated:** [October 17, 2017, 6:21pm UTC](https://community.auth0.com/t/enabling-impersonation-for-an-additional-administrator/8497 "2017-10-17T18:21:43Z")

</div>

I have impersonation enabled for some our admins but we need it enabled for a new admin. How can I get it enabled for them?

---

## [Impersonation for a server-side app](https://community.auth0.com/t/impersonation-for-a-server-side-app/8481)

<div class="topic-metadata">

**Author:** [@emiliano.heyns](https://community.auth0.com/u/emiliano.heyns)\
**Replies:** 9\
**Last updated:** [October 13, 2017, 9:37pm UTC](https://community.auth0.com/t/impersonation-for-a-server-side-app/8481 "2017-10-13T21:37:46Z")

</div>

I’m trying to login as another user using “Sign in as user”. When I do this, I can see my app getting a POST request to the callback url, but my app is setup (and normal logins work) with GET requests. When I change the …

---

## [Should impersonated and impersonator properties be persisted when doing silent authentication?](https://community.auth0.com/t/should-impersonated-and-impersonator-properties-be-persisted-when-doing-silent-authentication/8296)

<div class="topic-metadata">

**Author:** [@jamesacres](https://community.auth0.com/u/jamesacres)\
**Replies:** 0\
**Last updated:** [September 26, 2017, 1:29am UTC](https://community.auth0.com/t/should-impersonated-and-impersonator-properties-be-persisted-when-doing-silent-authentication/8296 "2017-09-26T01:29:39Z")

</div>

When performing User Impersonation the properties impersonated and impersonator are set on the user profile as expected. getSSOData does not support impersonation, however silent authentication does work. This means you…

---

## [Enabling impersonation on a free account](https://community.auth0.com/t/enabling-impersonation-on-a-free-account/7875)

<div class="topic-metadata">

**Author:** [@benm1](https://community.auth0.com/u/benm1)\
**Replies:** 1\
**Last updated:** [August 17, 2017, 3:06pm UTC](https://community.auth0.com/t/enabling-impersonation-on-a-free-account/7875 "2017-08-17T15:06:19Z")

</div>

We have a paid Auth0 account and we are in the process of setting up a separate Auth0 environment for testing purposes. We have impersonation enabled on our paid account and we would like to have it enabled on our free …

---

## [Impersonation API: response\_type: 'token' not working](https://community.auth0.com/t/impersonation-api-response-type-token-not-working/7789)

<div class="topic-metadata">

**Author:** [@Dan\_Grayson](https://community.auth0.com/u/Dan_Grayson)\
**Replies:** 1\
**Last updated:** [August 9, 2017, 11:48pm UTC](https://community.auth0.com/t/impersonation-api-response-type-token-not-working/7789 "2017-08-09T23:48:17Z")

</div>

Hi, I had a working implementation of impersonation, and it seems that today it stopped working because the impersonation API MY\_DOMAIN.auth0.com/users/USER\_ID/impersonate is generating an impersonation url with a redir…

---

## [Impersonation not enabled on one account](https://community.auth0.com/t/impersonation-not-enabled-on-one-account/7599)

<div class="topic-metadata">

**Author:** [@rodrigo2](https://community.auth0.com/u/rodrigo2)\
**Replies:** 2\
**Last updated:** [July 24, 2017, 3:41pm UTC](https://community.auth0.com/t/impersonation-not-enabled-on-one-account/7599 "2017-07-24T15:41:18Z")

</div>

Hello, I have multiple Europe Accounts connected to my email on Auth0, and I can fully manage them all. Weirdly, two of them have impersonation enabled while the other does not, without me being able to find any option …

---

## [Does anyone else use impersonation and has security breaches?](https://community.auth0.com/t/does-anyone-else-use-impersonation-and-has-security-breaches/7151)

<div class="topic-metadata">

**Author:** [@Mark\_Redman](https://community.auth0.com/u/Mark_Redman)\
**Replies:** 0\
**Last updated:** [June 20, 2017, 12:28pm UTC](https://community.auth0.com/t/does-anyone-else-use-impersonation-and-has-security-breaches/7151 "2017-06-20T12:28:53Z")

</div>

I am wondering how people use impersonation and if they have had any issues? from technical support: “Note, that we do not recommend using the impersonation feature as it may introduce security vulnerabilities into…

---

## [Enabling impersonation on a free account](https://community.auth0.com/t/enabling-impersonation-on-a-free-account/6313)

<div class="topic-metadata">

**Author:** [@roelof.blom](https://community.auth0.com/u/roelof.blom)\
**Replies:** 1\
**Last updated:** [April 24, 2017, 2:58pm UTC](https://community.auth0.com/t/enabling-impersonation-on-a-free-account/6313 "2017-04-24T14:58:48Z")

</div>

Is it possible to have impersonation enabled on tenants of a free plan?

---

## [Impersonation with wildcard in callback URL](https://community.auth0.com/t/impersonation-with-wildcard-in-callback-url/6264)

<div class="topic-metadata">

**Author:** [@Shawn\_Marie\_Richards](https://community.auth0.com/u/Shawn_Marie_Richards)\
**Replies:** 1\
**Last updated:** [April 19, 2017, 2:48pm UTC](https://community.auth0.com/t/impersonation-with-wildcard-in-callback-url/6264 "2017-04-19T14:48:22Z")

</div>

We are trying to use impersonation via the Auth0 website (“Sign in as user” on the user page). This works well for callback URLs without wildcards, but most of our URLs do contain wildcards. There does not appear to be…
