Impersonate other users

Questions
1

I’m developing a React application that uses Okta for authentication. In our setup, we have two Okta groups: one for regular users and one for admin users.

I would like to enable a feature where admin users can impersonate other users. Specifically, when an admin clicks an “Impersonate” button, they should be able to see a list of users from the regular users group. Upon selecting a user, the admin should be able to “log in” as that user and view their account page.

Is this kind of impersonation possible using Okta? If so, what would be the recommended way to implement this functionality?

Thank you for your help!

2

Okta supports the On-Behalf-Of Token Exchange, but this is intended for microservices and won’t provide the functionality you are looking for.

There is an Impersonation Token Exchange flow, but that is currently not supported.

For the scenario described,

the admin should be able to “log in” as that user and view their account page.

Does this refer to logging into to your own applications account page, or the Okta dashboard application?

1 Like
3

It refers to logging into our own applications account page

4

In this case I think you would need to rely on a management Application that could query Okta for users and retrieve their profile.