SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We currently have a situation where we need the ability to fully impersonate a login on a SharePoint Web Application. Effectively any "SuperUser" needs the ability to, without a password, proxy login as another user and see all that this user sees. Is there a way to accomplish this in SharePoint 2010?

share|improve this question
up vote 3 down vote accepted

Kerberos and NTLM will not allow this though it could be done via Forms authentication but you would have to write your own provider and install your own "back door" to enable this behavior. It could also possibly be done via Claims authentication.

However, doing something like this pretty much violates every security standard out there. I can understand the desire for such a feature but it utterly destroys any pretense of security and accountability. You are also in for no end of grief when your 'back door' is eventually leaked to the overall user community that you support.

share|improve this answer
+1 ...can't imagine that anyone in your company's/customer's infosec group would sign off on implementing something like this. – Rob D'Oria Aug 4 '11 at 19:26

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.