CAS 6.2.x - Impersonate Mechanism Question

[Marcel Fromkorth]

Hello CAS-Community,

I'm using the CAS-Version 6.2.5 and have a question about the surrogate authentication feature:

Is it possible, that I can visit a service as primary user, while I'm authenticated over an impersonate session?

To make it more clear:

I have two defined services. Both with SSO enabled and I'm logged ins as an impersonated user. For example: surrogate user: "user" and primary user "admin".

If the surrogate user "user" doesn't have permission to access the second service (so he has only access to the first service), is it possible to configure that he will see the second service as primary user "admin" (because the primary user has access to this service)?

I hope, I explained this in a way which everyone can understand.

Thank you,

Marcel Fromkorth

[Misagh Moayyed]

If by possible you mean OOTB, then no. The session established via impersonation is scoped to the surrogate user.