I have Secure Store and also Kerberos setup on my development and production farms. I am using Event Receivers to access BCS data. I have verified that if I simply impersonate a user that has access to the back-end I can return data in a web part. What is the best way to utilize the Secure Store instead of simple impersonation to in code to determine if a user is a member of that particular AD group that is assigned permissions with a particular Secure Store app id?
Do we impersonate or better yet how do we use the assigned secure store user that in turn has access to the back-end BCS system to access the data in a web part in code?
I have setup External Lists using External Content Types that have been created using BCS Meta Man. I have then assigned the Secure Store App Id to that Model using SharePoint Designer 2010 and of course everything works. I think I am just having a problem understanding how to utilize the Secure Store to simplify BCS access without having to impersonate a particular user that relies on Kerberos in code. Any help would be most appreciated, thanks!